100% found this document useful (1 vote)
216 views19 pages

Chrome OS Practice Exam

The document is a practice exam for Chrome OS administration, featuring multiple-choice questions covering topics such as security features, user management, device enrollment, and application deployment. It tests knowledge on ChromeOS functionalities, administrative settings, and best practices for managing ChromeOS devices in various organizational contexts. The exam includes questions about antivirus requirements, Wi-Fi connectivity restrictions, and methods for signing in to devices, among others.

Uploaded by

fadi abu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
216 views19 pages

Chrome OS Practice Exam

The document is a practice exam for Chrome OS administration, featuring multiple-choice questions covering topics such as security features, user management, device enrollment, and application deployment. It tests knowledge on ChromeOS functionalities, administrative settings, and best practices for managing ChromeOS devices in various organizational contexts. The exam includes questions about antivirus requirements, Wi-Fi connectivity restrictions, and methods for signing in to devices, among others.

Uploaded by

fadi abu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Chrome OS Administration Practice Exam

Questions & Answers :

1- You are asked why ChromeOS devices do not require additional antivirus software.
How should you respond?

[Link] time ChromeOS updates, it automatically updates the antivirus software on the device
[Link] ChromeOS device is pre-installed with antivirus software which automatically updates
during the life of the device
[Link] part of a multi-layered security approach ChromeOS uses a read-only operating
system which cannot be affected by viruses
[Link] Admin console automatically deploys antivirus software to enrolled ChromeOS devices
and is included in the Chrome Enterprise/Education Upgrade

2- You want to restrict who can sign in to a managed device during working hours. Which
two settings do you need to use?

Choose 2 answers
[Link] sign-on IdP redirection
[Link] of hours
[Link] Data (Ephemera)
[Link] Link accounts

3- An admin wants to use a custom extension to install a client certificate on a


ChromeOS device so that it can connect to the corporate WI-FI.

Which step is necessary to accomplish this?

[Link] on the device via guest mode


[Link] through the Chrome Web Store
[Link]-install to the device
[Link] the certificate in DER-encoded format
4- An organization was recently hacked through an admin's choice of an operating
system. Leadership decides to move to Chromebooks for their security.

While the organization waits for Chromebooks to be delivered, what will allow them to
continue using their existing devices securely?

[Link] Readiness Guide


[Link] Managed Browser
[Link] Bytes
[Link] Flex

5- Which site isolation policy will enable site isolation for your entire organization?

[Link]
[Link]
[Link]
[Link]

6- What is a feature of Verified Boot?

[Link] sure that the firmware and OS have not been tampered with
[Link] anonymous guests from using the device
[Link] the need for strict policy controls
[Link] the user from accessing unauthorized websites

7- You are using a third-party service for SSO. Users are confused when signing onto a
Chrome device because they are asked for Google account details before being
redirected to the sign-In screen for your SSO provider. Which setting must be changed
so managed devices open the SSO provider login page by default?

[Link] single sign-on login frequency


[Link] single sign-on password synchronization flows
[Link] sign-on cookie behavior
[Link] sign-on IdP redirection

8- The security team is requiring Wi-Fi connectivity to be disabled on ChromeOS devices.


Using the Google Admin console, how would you configure ChromeOS devices to block
all WI-FI connectivity and hide the WI-FI Icon?

[Link] 'Restricted Wi-Fi Networks


[Link] WiMax connectivity
[Link] Wi-Fi from 'Enabled network interfaces
[Link] 'Auto Connecting' to Wi-Fi
9- An organization has created organization units within the Google Admin console for
additional management structure. What is the most effective way to manage each OU
while not affecting the top-level OU policy?

[Link] sublevel OUs and only work from the top level OU
[Link] auto updates
[Link] the inheritance for a given policy
[Link] inheritance from top level OU to all OUs

10- You are a ChromeOS Administrator of a school district While working with a teacher
in one of the schools, they mention they are having issues downloading files on their
ChromeOS device. What are some ways you can help troubleshoot with the least amount
of disruption to the user?

[Link] Diagnostics from the ChromeOS device to troubleshoot


[Link] how much storage Is being used on the device then delete or move files that
aren't needed anymore
[Link] the user's ChromeOS device to its original factory settings
[Link] for system updates If any updates are available install them

11- Help Desk administrators need a limited set of privileges to perform actions in the
Google Admin console. How should an administrator grant these permissions while
conforming to the practice of least privilege?

[Link] a Service Desk Group and add Service Desk admins to the group
[Link] a new custom admin role and assign
[Link] service desk administrators the Services Admin Role
[Link] Help Desk administrators full access to manage users

12- In regular user mode, how does an admin open the crosh shell on a ChromeOS
device to run a ping command?

[Link] + Alt + V
[Link] + Alt + t
[Link] + Alt + Tab +W
[Link] + Alt + i
13- A large marketing company hires interns in the IT department. The interns should see
only info from ChromeOS devices but should not be able to manage or update any
device.

How should an admin assign this role to Interns?

[Link] a custom services admin role and enable 2FA


[Link] Custom role under Chrome management and assign Telemetry API role
[Link] Custom role under Chrome management and assign Settings rote
[Link] Custom role under Chrome management and assign Manage ChromeOS devices role
K.

14- To use Verified Access in your organization, you need to have a Chrome extension
that calls Verified Access API on the client devices. Where can you go to get this
extension?

[Link] Play Store


[Link] software vendor (ISV) or Google Verified Access API
[Link] software vendor (ISV) repository
[Link] API Key store

15- You're in charge of deploying video conferencing equipment and it has been decided
that you will leverage ChromeOS devices. What initial considerations should you make
when deciding on devices?

[Link] instructional guides to all users on setup configuration, and use of new equipment
B.A form factor compatible for both remote and site workers is required
C.A precise time window on how to apply security patches and updates to all devices
[Link] must have 8GB of RAM and obey supported processor models

16- A ChromeOS Administrator has deployed ChromeOS devices in their organization.


How can the company evaluate the compatibility with future updates following Google's
best practices while still gaining access to new features when they launch?

[Link] 'Auto Updates' on all devices on the 'Stable channel*, but let the employees in
the IT department run their devices on the 'Beta channel* so they have time to evaluate
and adapt the environment to each update before it reaches Stable
[Link] ''Auto Updates'' on all devices and let the admin test the newest release on the
'Stable channel' on their own device before rolling it out organization-wide
[Link] 5% of the organization across several departments on the 'Beta channel'1, and configure
the rest of the fleet to receive auto updates on the 'Stable channel'
[Link] the entire fleet to update in accordance with the 'Long-term Support (LTS) channel'
17- Which management feature makes ChromeOS devices a popular choice for IT
administrators in educational organizations and enterprises?

Which management feature makes ChromeOS devices enterprises?

[Link] management through on prem infrastructure


[Link] BIOS controls and firmware update
[Link] management through Admin console
[Link] to remotely control and monitor devices

18- What should an administrator do to view the number and type of ChromeOS
upgrades purchased and in use by their domain?

[Link] upgrades on devices page


[Link] subscriptions in billing
[Link] partner to verify
[Link] reports page for upgrades

19- As a ChromeOS Administrator, you have been asked to enroll all of your devices into
a specific device OU using Zero-Touch Enrollment (ZTE). What are the next steps?

[Link] a ZTE pre-provision enrollment token for your specified device OU


[Link] the company domain name to your Chrome Partner to enable ZTF
[Link] a ZTE pre-provision enrollment token directly for your domain root OU
[Link] a ZTE pre-provision enrollment token for your specified user OU
[Link] a dedicated ZTE Admin account for device enrollment

20- Which remote command is required to remove a device from management policy
updates?

[Link]
[Link]
[Link]
[Link]

21- What is the recommended way to provision users from an on-prem Active Directory
environment into the Google Admin console?

[Link] via CSV


[Link] SDK Directory API
[Link] AD Google Cloud/G Suite Connector
[Link] Cloud Directory Sync
22- To allow remote users to securely connect to an internal network, the organization
you're supporting is using a VPN. The organization would like you to configure the
ChromeOS devices so that the Android VPN clients deployed are automatically
configured with the correct hostname. How should you configure this in the Admin
Console according to Google best practice?

[Link] the Android app on a ChromeOS device, add the hostname manually then
re-upload the app in the organization's private Google Play Store and deploy it lo all ChromeOS
devices
[Link] the VPN provider and ask them to provide you with a custom installable client with
the correct configuration pre-configured Then deploy that installable
[Link] a managed configuration using JSON to the Android app
[Link] a JSON file with the configuration into the Google Play Store

23- Your customer is deploying ChromeOS devices in their environment and requires
those ChromeOS devices to adhere to web filtering via TLS (or SSL) Inspection. What
recommendations should you make to your customer in setting up the requirements for
ChromeOS devices?

[Link] a hostname allowlist, set up a TLS (or SSL) certificate, then verify TLS (or
SSL) inspection is working
[Link] out lo Google Workspace Security and Compliance for tailored configurations for your
customer
[Link] a transparent proxy, set up your allowlist to use * google com. then verify TLS (or
SSL) inspection is working
[Link] devices are preconfigured to adhere to company TLS (or SSL) inspection by
default and can therefore be deployed with no additional configuration

24- As a ChromeOS Administrator, you are tasked with blocking incognito mode in the
ChromeOS Browser. How would you prevent users from using incognito mode?

[Link] to 'Users & Browser Security Settings' and set the 'Disallow incognito mode'
policy
[Link] ,0 'User & Browser Settings' to restrict sign-in to pattern and 'Disallow incognito mode '
[Link] 'Device Settings' change Kiosk settings to 'Disallow incognito mode '
[Link] 'Enrollment Settings' disable vended access and incognito mode (or content protection

25- What format of certificate encoding is incompatible with ChromeOS devices?

[Link]
[Link]
[Link]
[Link]
26- A customer deploys a large number of ChromeOS devices and would like to start the
process of turning on Zero-Touch Enrollment (ZTE) to streamline their deployment
process. As an administrator, what would be required to enable ZTE?

[Link] partner admin access


[Link] OU to place devices during enrollment
[Link] a zero-touch token
[Link] a pre-provisioning token

27- You are tasked with adding a security key to a single user account Where should you
navigate to?

[Link] > Select User > Password


[Link] > Select User > Security
[Link] > 2-step Verification
[Link] > Password Management

28- How would you deploy a Progressive Web Application to all managed user accounts?

[Link]-install the Progressive Web Application URL in the 'Chrome Apps & extensions'
page
[Link] up Chrome Imprivata shared apps & extensions to force-install the Progressive Web
Application URL
[Link] to 'User & Browser Settings' and add the Progressive Web Application URL in the 'Legacy
Browser Support' site list
[Link] 'Additional Google services' to force-install the Progressive Web Application URL

29- How would you deploy your 'Terms of Services' page to all managed ChromeOS
devices?

[Link] to 'Chrome Verified Access' and enable the policy for content protection
[Link] to 'User & Browser and 'Managed Guest Session' settings to upload your terms of
service
[Link] 'User & Browser Settings' upload the 'Terms of Service' as a wallpaper
[Link] to 'User & Browser' and 'Managed Guest Session' settings to upload your custom
avatar

30- What are two methods for signing in to a Chrome OS device? Choose 2 answers

[Link] code sent to mobile phone


[Link] sign-on
[Link] Friend Connect
[Link] Connect
31- You are setting up ChromeOS devices in a public library and need to prevent your
ChromeOS devices from sleeping when not in use. How would you set up your policy to
achieve this?

[Link] 'Power management settings' apply 'Do not allow device to sleep/shut down when
idle on the sign-in screen '
[Link] 'User & Browser Settings' for Power and shutdown set the policy to 'Do not allow wake
locks '
[Link] 'Power management settings' set the policy to 'Only allow users to turn off the device using
the physical power button '
[Link] 'Managed Guest Session settings' set the maximum user session length to 'unlimited '

32- The security department has been informed that a ChromeOS device was stolen out
of an employee's car. What should you do in the Admin console to ensure the device Is
rendered Inoperable while still maintaining management of the device?

[Link] the ChromeOS device as stolen


[Link] the ChromeOS device
[Link] the ChromeOS device
[Link] the ChromeOS device

33- Your organization's security protocols require you to ensure that any unattended
devices log the user out after 24 hours. You have 1000 ChromeOS devices to manage.
How would you implement this with the least amount of admin effort?

[Link] the 'User and Browser Settings' and update 'Maximum user session length* to
any time up to 24 hours
[Link] a corporate policy stating (he users are to manually sign out after the end of every shift
[Link] can remotely access each device and sign out of the user account using Chrome Remote
Desktop
[Link]-install a custom app to each device in question that notifies the user that they need to
sign out of their device after 24 hours

34- Which setting is required to restrict Chrome Remote Desktop use to only accounts on
your domain?

[Link] traversal
[Link] Blocking
[Link] access clients
[Link] Remote Denton review
35- At a specific location in your organization, users cannot log in to their ChromeOS
devices. The ChromeOS Administrator has also noticed that devices have not synced in
the past 24 hours. You have updated policies In the Admin console for your fleet of
ChromeOS devices, but the devices are not getting the updated policies. What is a
probable change in the environment that can cause these issues?

A.A different location enrolled a large number of new devices


[Link] network administrator has blocked all network traffic to Google services
[Link] root Certificate Authority expired
[Link] organization's licenses have recently expired

36- What are two ways customers can open a support case for ChromeOS? Choose 2
answers

[Link] support via the Admin console


[Link] the device manufacturer
[Link] feedback on the device with Alt + Shift +1
[Link] case through Customer Care Portal
[Link] an email to ChromeOS support

37- You have a number of applications that you rely upon. You want to ensure that your
applications continue to run smoothly with each new version of Chrome. What should
you do?

[Link] users to provide feedback on the applications within a week of a new Chrome release
[Link] them to take no action All applications are automatically supported on the latest
version of Chrome
[Link] install the latest version of those applications when they become available so they are
always compatible with the latest version of Chrome
[Link] a QA strategy and put their IT group and 5% of users on the beta channel of
ChromeOS so they can find and report bugs early for upcoming Chrome releases

38- You want to enterprise enroll a device that has existing consumer accounts. What
should you do first?

[Link] Google support to convert the device into an enterprise device


[Link] all consumer accounts, and then follow the same steps for enrolling a brand
new device
[Link] the same steps for enrolling a brand new device
[Link] the device
39- You have been tasked with selecting a 3rd party IdP to allow logging into ChromeOS
devices. Your ChromeOS devices are displaying an 'Unable to sign in to Google'
message. How should you troubleshoot this?

[Link] the Identity provider is using an SAML compliant connection


[Link] Multi-Factor Authentication for the user account in the Google Admin console
[Link] the SSO connection in the Google Admin console
[Link] the SSO certificate lo the ChromeOS device

40- As an administrator, you would like the ability to see and test upcoming changes to
the Google Admin console. How would an admin get access to pre-release features and
upcoming ChromeOS device management changes to the Admin console?

[Link] in the ChromeOS Factory Software Platform


[Link] the Chrome Enterprise BETA Testing
[Link] for the Chrome Enterprise Trusted Tester Program
[Link] a ChromeQS Developer Account

41- Your security team asks you to deploy on ChromeOS only a specific Android app for
your security department. As a ChromeOS Administrator, you need to find a way to block
all other Android apps except the one that you need. How are you going to proceed?

[Link] the 'Apps & extensions' page add the Android app on the security team user OU
[Link] the 'Users & Browser Settings'' tab. for the Play Store, use the 'Block all apps,
admin manages allowlist' policy and allow only the
[Link] app that you want from 'Apps & extensions ' On the 'Users & Browser Settings'' tab.
for the Chrome Web Store use the 'Block all apps, admin manages allowlist' policy and allow
only the Android app that you want on 'Apps & extensions '
[Link] trio 'Apps & extensions' page add the Android app on the security team user OU and
select 'Force Install * pin to ChromeOS taskbar'

42- What is a best practice for admin accounts on the Google Admin console?

[Link] Admins should be used for all changes to the domain


[Link] Admins should have 2FA enabled only if given security policy controls
[Link] Admins should use a separate user account for day-to-day activities
[Link] Admins should have access to multiple groups
43- You need to create a recovery image on a USB stick. Which two steps should you
take?

Choose 2 answers

[Link] to Device Settings


[Link] lo google com/chromebooks
[Link] to Google Play store
[Link] to Chrome Web Store on a Chrome device
[Link] Chrome Recovery Utility and download the image for the coned device model to
a USB stick

44- An admin is setting up a third-party SSO for their organization as the super admin.
When they test with their account, they do not see the SSO screen.

What is causing this behavior?

[Link] settings are misconfigured


[Link] account is in the wrong OrgUnit
[Link]-party SSO is not enabled
[Link] admin bypassed the thud-patty

45- What is needed for an admin to remote desktop to a user or managed guest session
devices with the Admin console?

[Link] user must accept the connection request


[Link] user must share the session pin with the admin
[Link] the admin and the remote device must be on the same network
[Link] admin must be in the same OU as the remote device

46- A user reports that their Chrome device has been stolen. What should the
administrator do?

[Link] the Google Admin console to turn on the stolen Chromebook's webcam
[Link] the Google Android Device Manager to locate the Chromebook
[Link] the stolen Chromebook lo disabled mode to prevent user sign-ins
[Link] wipe user data from the Chromebook
47- Your hardware OEM issues a recall for a safety issue. You need to deprovision
devices from management before returning to the OEM. They will replace your existing
ChromeOS devices with a different model. Which option should you choose when
deprovisioning to make sure you can reuse your Chrome Education/Enterprise Upgrade
and remain compliant?

[Link] from fleet


[Link] model replacement
[Link] Flex upgrade transfer
[Link] model replacement

48- A customer has a mission-critical workload running on ChromeOS and needs devices
configured to reduce ChromeOS changes. How can an admin reduce the risk of an
unexpected change in an OS update affecting the customer's entire ChromeOS device
domain while maintaining security and minimizing admin workload?

[Link] auto reboot after update


[Link] variations
[Link] to a Long-term Support channel
[Link] an update rollout plan

49- How should you use Chrome Remote Desktop from the Google Admin console to
connect a user?

[Link] the user account and click remote desktop


[Link] Chrome Remote Desktop and type the device serial number
[Link] Chrome Remote Desktop and type the user's user name
[Link] the device and click remote desktop
50- You are tasked with converting hundreds of Windows & Mac machines across
multiple locations to ChromeOS Flex and enrolling them into the Admin console. The
available network bandwidth is limited at many of the locations and the devices are not
currently managed with any endpoint management system. Which two operations are
required to perform the task?

Choose 2 answers

[Link] a dedicated enrollment account tor each location and place them into the OUs
you want the devices enrolled into then enable the 'Place ChromeOS device in user
organization' policy and enroll the devices using the respective enrollment account for
each location
[Link] the Recovery Tool extension on all devices that are to be converted and follow the
step-by-step installer to convert each device directly without the need of USB drives
[Link] PXE boot to load the ChromeOS Flex image onto devices and have them automatically
convert across all locations after they're restarted
[Link] an authorized Zero-Touch Enrollment (ZTE) reseller and share the serial numbers of
the devices you're converting and the domain you're enrolling them into to have them
pre-provisioned into the Admin console
[Link] USB flash drives with the ChromeOS Flex image to the different locations
and ask local personnel or a services partner to manually convert each device

51- When setting up a Chrome Enterprise trial, what is a benefit of choosing to verify the
domain?

[Link] management
[Link] management
[Link] management
[Link] management

52- Your organization has automatic ChromeOS updates implemented. Your CTO would
like to review the documentation on what changes each new version has. How would you
assist your CTO in accomplishing this goal?

[Link] your CTO start a Google Chrome Support ticket


[Link] YouTube for Chrome Update stories
[Link] Chrome and enter chrome //updates in the address bar
[Link] your CTO to the 'Chrome Release Notes Support' page
53- Your network administrator wants to block Google services traffic. What is the result?

[Link] Search will not work


[Link] devices will crash
[Link] devices will not be able to reach Google
[Link] This isn't an issue

54- In line with Google's best practice recommendations, you need to configure an OU of
devices to run on an early release of ChromeOS so that users can test new features and
verify functionality. Which policy option should you choose?

[Link]
[Link]
[Link]
[Link]

55- You have been asked to explain the built-in security features of ChromeOS. What i3
the benefit of having verified boot enabled on a ChromeOS device?

[Link] ensures that the OS is uncompromised


[Link] allows updates to happen in the background
[Link] both operating systems on one device at the same time makes It twice as powerful
[Link] installs the known safe backup OS every time the device is slatted up.

56- You're the lead for the technology department and you're working with your teammate
on a hardware refresh in the upcoming year A major part of the refresh Is to consider
ChromeOS devices for the majority of the users in the company. What are some
organization level objectives you should consider during this hardware refresh in regard
to ChromeOS?

[Link] integration with current technological standards and practices can be worked on
with trusted Google partners
[Link] If all the terms and conditions in the Chrome Online Agreement are applicable to
ChromeOS
[Link] allows for advanced security flexible access, and simplified orchestration
within the business
[Link] will need a rollout and execution plan commensurate with hardware supply
availability
57- You need to set a policy that prevents the device from shutting down while idling on
the sign-in screen. Where should you navigate to?

[Link] Settings > Idle settings


[Link] Settings > User Experience
[Link] Settings > Allow shutdown
[Link] Settings > Power management

58- You want users to sign in to ChromeOS devices via SAML Single Sign-On and be able
to access websites and cloud services that rely on the same identity provider without
having to re-enter credentials. How should you configure SAML?

[Link] SAML identity provider-initialed login for Google authentication


[Link] SAML-based Single Sign-On for ChromeOS devices and set the Single Sign-On
cookie behavior to enable transfer of SAML SSO cookies into user sessions during login
[Link] SAML-based Single Sign-On for each application via Chrome App Management
[Link] Chrome App Builder to enable SSO for application and force-install the application using
ChromeOS user policies

59- You need to get to the enterprise enrollment screen. What should you do?

[Link] Ctrl-Alt-E during the Chrome bootup sequence (Chrome logo animation)
[Link] in with enterprise enrollment credentials provided by the customer at the user sign-in
screen
[Link] Ctrl-Alt-F on the initial welcome screen to set initial settings
[Link] Ctrl-Alt-E at the user login screen before any user has signed in to the device

60- You are enrolling several devices to send to a remote location. How can you ensure
that these devices will automatically connect to the wireless network at the remote
location when powered on for the first time?

[Link] the wireless network credentials to the 'Networks' section in the Admin console
ensuring that they are applied to the ChromeOS devices By Device
[Link] the Google Zero-Touch Enrollment (ZTE) process and generate the provisioning token by
clicking on the 'Enroll device' button in the Admin console ''Devices'' page
[Link] the enrollment process add the wireless credentials manually to each device in the
Admin console ensuring that they are applied to ChromeOS devices By User
[Link] the wireless network credentials to the 'Networks' section in the Admin console ensuring
that they are applied to the ChromeOS devices By User
61- You have a new, custom, mission-critical web app from your development team. As
the ChromeOS Administrator tasked with the deployment of the application to one
particular unit, it is decided to leverage ChromeOS in completing this rollout. What
should you do to support this deployment?

[Link] the business unit scoped to its own organizational unit (OU), force the installation
of the app and extension to your users and browsers via the URL of the web application.
[Link] out to Chrome Enterprise support and create a ticket to deploy the custom web
application to those business users.
[Link] partners to develop software deployment pipelines scoped only to the OU.
[Link] the installation of the web app from the Chrome Web Store to users within that business
unit.

62- Your C-Level team would like to make sure your company is prepared to take
advantage of features not yet publicly released. How can you accomplish this goal?

[Link]-up for Chrome’s Trusted Tester program.


[Link] a testing device to run in “Beta” mode.
[Link] a Chrome Support ticket to see if there are any new features coming out. Then ask your
Chrome Representative about those features.
[Link] your domain for Rapid-Release and watch the Google Release calendar so you
can test features when they are first released.

63- Your organization is buying new ChromeOS devices to replace older devices. You are
receiving these devices and need to dispose of them responsibly. What should you do to
each of these devices before disposing of them?

[Link] the devices.


[Link] the devices.
[Link] reset the devices.
[Link] the devices.

64- Which type of DNS record should be used to verify a domain?

A.A
[Link]
[Link]
[Link]
65- You want to apply a set of device policies across multiple organizational units (OUs).
What should you do?

[Link] the device list from one OU to a CSV file, then use Google Apps Directory Sync to
import your new policies to other OUs.
[Link] a higher level OU where the policies can be applied, then rely on inheritance to
propagate the policies to the other OUs.
[Link] the set of policies in one OU, then use copy and paste to set those policies in the
other OUs.
[Link] the Directory API to create the policies in each OU.

66- As the ChromeOS Administrator, you have been given previously used devices by
another organization that have been used, but do not know the current management
state of the devices. When are you required to wipe a device before enrolling it?
Choose 2 answers

[Link] the device has been signed in to by a user before enrolling it.
[Link] a replacement device is sent from an OEM to replace a defective device.
[Link] the device has been previously enrolled in a different domain.
[Link] the device has been sitting in a warehouse for more than 90 days.
[Link] the device has been purchased from an authorized reseller.

67- Where in the security settings should an admin configure login integration with Okta
in the Admin console?

[Link] with third-party IdPs


[Link]-Factor Authentication
[Link] with first-party as SAML IdP
[Link] wide authentication

68- You are working with a customer to reduce electronic waste, extend hardware
lifecycles, and undertake environmentally responsible based initiatives. ChromeOS Flex
(Beta) is identified as a potential solution to address these areas. What are some
considerations you must make when it comes to deploying ChromeOS Flex (Beta).

[Link] Energy Efficiency certification denotes environmental standards to be leveraged upon


deployment of ChromeOS Flex (Beta).
[Link] hardware capable of installing an operating system is in scope for this solution.
[Link], apps, hardware, and management of devices will need to be vetted for
functionality and feature parity.
[Link] Flex (Beta) requires the least amount of device testing and can therefore expedite
production readiness.
69- You are managing the "Customer Kiosk" child organization and need to pin devices
to maintain stability and security. How would you configure your Chrome update settings
to achieve this?

[Link] the "Beta channel".


[Link] the "Stable channel".
[Link]-term Support Candidate channel.
[Link]-term Support channel.

70- What are two benefits of purchasing a Chromebook with a bundled license?
Choose 2 answers

[Link] license can be transferred to other devices after AUE


[Link] license follows the device between domains
[Link] license grants advanced security benefits
[Link] license is valid for the life of the product
[Link] license extends the AUE of the device

71- Your leadership team would like to verify that all ChromeOS devices are restarted to
apply the new update as quickly as possible. You have 2000 devices and your Admin
console is configured with automatic updates enabled. What can you do to ensure the
restart with the least amount of admin effort?

[Link] “User and Browser Settings”, under “Chrome Updates”, configure “Relaunch
Notifications” to “Force relaunch after a period” and enter a time period in hours.
[Link] Human Resources to create and send out a company memo asking everyone to restart
their devices within 24 hours.
[Link] connect to each device using Chrome Remote Desktop and restart the device. After
the device has started, start up the Chrome Browser, go to chrome://help to verify that the
update has taken place.
[Link] the Admin console, in “Device Settings”, under “AutoUpdate Settings”, configure “Device
Updates” to “Allow updates”.

72- The IT team set a policy configuration that allows users to have the ability to reset
(powerwash) their device to a default state. The IT team wants to ensure that the devices
will stay fully managed at all times. What should you do to achieve this goal?

[Link] the “Powerwash” policy to “Allow powerwash to be triggered.”


[Link] the “Sign-in Restriction” policy to “Allow any user to sign-in.”
[Link] the “Single Sign-On IdP redirection” policy to “Allow users to go directly to SAML SSO IdP
page.”
[Link] the “Forced re-enrollment” policy to “Force device to automatically re-enroll after
wiping.”
73- An organization recently bought Bluetooth headsets for Chromebook users.
Which group of settings should an admin review to make sure these headsets can
connect?

[Link]
[Link] guest session
[Link] & browser
[Link]

You might also like