Professional ChromeOS Administrator practice test

1. Question 1 · 1

   As an administrator, you would like the ability to see and test upcoming changes to the Google Admin console. How would an admin get access to pre-release features and upcoming ChromeOS device management changes to the Admin console?

   Choose one answer.

   • Enroll in the ChromeOS Factory Software Platform
   • Join the Chrome Enterprise BETA Testing
   • Register for the Chrome Enterprise Trusted Tester Program
   • Create a ChromeOS Developer Account

2. Question 2 · 1

   You have a number of applications that you rely upon. You want to ensure that your applications continue to run smoothly with each new version of Chrome. What should you do?

   Choose one answer.

   • Ask users to provide feedback on the applications within a week of a new Chrome release.
   • Advise them to take no action. All applications are automatically supported on the latest version of Chrome.
   • Always install the latest version of those applications when they become available so they are always compatible with the latest version of Chrome.
   • Implement a QA strategy and put their IT group and 5% of users on the beta channel of ChromeOS so they can find and report bugs early for upcoming Chrome releases.

3. Question 3 · 1

   An organization is moving from ChromeOS Flex to Chromebooks. The admin has a purchase of 50,000 devices being delivered that must be set up within two days of delivery. What is the most efficient way to accomplish this?

   Choose one answer.

   • Engage the vendor to manually enroll devices
   • Work with the vendor to implement zero-touch enrollment
   • Enable user enrollment to the user OU
   • Use a Go-Box device to enroll devices on delivery

4. Question 4 · 1

   Your customer is deploying ChromeOS devices in their environment and requires those ChromeOS devices to adhere to web filtering via TLS (or SSL) inspection. What recommendations should you make to your customer in setting up the requirements for ChromeOS devices?

   Choose one answer.

   • Configure a hostname allowlist, set up a TLS (or SSL) certificate, then verify TLS (or SSL) inspection is working.
   • Reach out to Google Workspace Security and Compliance for tailored configurations for your customer.
   • Configure a transparent proxy set up your allowlist to use *.google.com, then verify TLS (or SSL) inspection is working.
   • ChromeOS devices are preconfigured to adhere to company TLS (or SSL) inspection by default and can therefore be deployed with no additional configuration.

5. Question 5 · 1

   You want users to sign in to Chrome devices via SAML and be able to access SAML-enabled web applications without having to re-enter their credentials. How should you configure SAML?

   Choose one answer.

   • Enable SAML-based Single Sign-On for Chrome devices and Single Sign-On Cookie Behavior
   • Use Chrome App Builder to enable SSO for each application and force-install the applications using Chrome user policies
   • Enable SAML identity provider-initiated login for Google Authentication
   • Enable SAML-based Single Sign-On for each application via Chrome App Management

6. Question 6 · 1

   How do you validate Chrome policies on a managed device?

   Choose one answer.

   • Download device logs
   • In the browser go to policy://chrome to confirm that the device is receiving both user and device policy
   • Go to the admin console and look up the policies
   • In the browser go to chrome://policy to confirm that the device is receiving both user and device policy

7. Question 7 · 1

   A customer deploys a large number of ChromeOS devices and would like to start the process of turning on Zero-Touch Enrollment (ZTE) to streamline their deployment process. As an administrator, what would be required to enable ZTE?

   Choose one answer.

   • Grant partner admin access
   • Identify OU to place devices during enrollment
   • Create a zero-touch token
   • Create a pre-provisioning token

8. Question 8 · 1

   A customer has a mission-critical workload running on ChromeOS and needs devices configured to reduce ChromeOS changes. How can an admin reduce the risk of an unexpected change in an OS update affecting the customer’s entire ChromeOS device domain while maintaining security and minimizing admin workload?

   Choose one answer.

   • Force auto reboot after update
   • Enable variations
   • Move to a Long-term Support channel
   • Add an update rollout plan

9. Question 9 · 1

   Your network administrator wants to block Google services traffic. What is the result?

   Choose one answer.

   • Google Search will not work.
   • Chrome devices will crash.
   • Chrome devices will not be able to reach Google.
   • Nothing. This isn’t an issue.

10. Question 10 · 1

    You want users to sign in to ChromeOS devices via SAML Single Sign-On and be able to access websites and cloud services that rely on the same identity provider without having to re-enter credentials. How should you configure SAML?

    Choose one answer.

    • Enable SAML identity provider-initiated login for Google authentication
    • Enable SAML-based Single Sign-On for ChromeOS devices and set the Single Sign-On cookie behavior to enable transfer of SAML SSO cookies into user sessions during login
    • Enable SAML-based Single Sign-On for each application via Chrome App Management
    • Use Chrome App Builder to enable SSO for application and force-install the application using ChromeOS user policies

11. Question 11 · 1

    What are two ways customers can open a support case for ChromeOS? (Choose two.)

    Choose all answers that apply.

    • Chat support via the Admin console
    • Contact the device manufacturer
    • File feedback on the device with Alt + Shift + i
    • File case through Customer Care Portal
    • Send an email to ChromeOS support

12. Question 12 · 1

    An organization was recently hacked through an admin's choice of an operating system. Leadership decides to move to Chromebooks for their security. While the organization waits for Chromebooks to be delivered, what will allow them to continue using their existing devices securely?

    Choose one answer.

    • ChromeOS Readiness Guide
    • ChromeOS Managed Browser
    • ChromeOS Bytes
    • ChromeOS Flex

13. Question 13 · 1

    Your security team asks you to deploy on ChromeOS only a specific Android app for your security department. As a ChromeOS Administrator, you need to find a way to block all other Android apps except the one that you need. How are you going to proceed?

    Choose one answer.

    • From the "Apps & extensions" page, add the Android app on the security team user OU
    • On the "Users & Browser Settings" tab, for the Play Store, use the "Block all apps admin manages allowlist" policy and allow only the Android app that you want from "Apps & extensions"
    • On the "Users & Browser Settings" tab, for the Chrome Web Store, use the "Block all apps, admin manages allowlist" policy and allow only the Android app that you want on "Apps & extensions"
    • From the "Apps & extensions" page, add the Android app on the security team user OU and select "Force Install + pin to ChromeOS taskbar"

14. Question 14 · 1

    Which remote command is required to remove a device from management policy updates?

    Choose one answer.

    • Deprovision
    • Reset
    • Disable
    • Powerwash

15. Question 15 · 1

    You want to enterprise enroll a device that has existing consumer accounts. What should you do first?

    Choose one answer.

    • Contact Google support to convert the device into an enterprise device
    • Delete all consumer accounts, and then follow the same steps for enrolling a brand new device
    • Follow the same steps for enrolling a brand new device
    • Wipe the device

Paid access to all 37 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.