Latest Google Chrome-Enterprise-Administrator Free Certification Exam Material with 52 Q&As
UPDATED Chrome-Enterprise-Administrator Exam Questions Certification Test Engine to PDF
Google Chrome-Enterprise-Administrator Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION # 12
A company is reviewing the permissions of extensions that are popular among employees The security team wants to make sure all extensions in the environment have these capabilities disabled:
* Modify to internal home page: `internal.acme.com`
* Access to the storage
* Access to history
Which actions should be taken in the company default extension Permissions and URLs fields to meet the security team's requirements?
- A. Add `*.acme.com` to runtime blocked hosts; Enable storage permission; Enable history permission
- B. Add `internal.acme.com` to runtime blocked hosts; Disable storage permission; Disable history permission
- C. Add `*.acme.com` to runtime blocked hosts; Disable storage permission; Disable history permission
- D. Add `internal.acme.com` to runtime blocked hosts; Enable storage permission; Enable history permission
Answer: C
Explanation:
To prevent extensions from modifying the internal homepage, the administrator should add `*.acme.com` to the "Runtime blocked hosts" list. The wildcard `*` ensures that any attempt to access or modify this domain by an extension will be blocked at runtime. Additionally, to disable access to storage and history, the administrator needs to explicitly disable the "Storage" and "History" permissions within the extension management settings. Therefore, the correct combination is to block the host and disable the permissions.
NEW QUESTION # 13
Where can information about all of the profiles associated with a browser be found\*?
- A. Managed devices
- B. Chrome Insights report
- C. Chrome log events
- D. Managed browsers detail
Answer: D
Explanation:
The "Managed browsers detail" page in the Google Admin console provides specific information about individual managed Chrome browser instances. This includes details about the profiles associated with that browser, such as the signed-in users and their management status. Chrome log events might contain some profile-related information but are more focused on actions. The"Managed devices" section primarily focuses on ChromeOS devices. The "Chrome Insights report" provides a high-level overview rather than detailed profile information for a specific browser instance.
NEW QUESTION # 14
In Chrome's Safe Browsing settings, which option provides the most robust protection againstonline threats and is suitable for a highly secure environment?
- A. Proactive Defense
- B. Advanced Threat Protection
- C. Enhanced Protection
- D. Secure Browsing Mode
Answer: C
Explanation:
Among the Safe Browsing options, **Enhanced Protection** offers the most robust security. It proactively checks URLs, downloads, and extensions against Google's Safe Browsing database in real time, and it can also share more data with Google to improve detection and provide personalized warnings. This level of protection is best suited for environments with high security requirements. The other options might represent different levels of Safe Browsing with varying degrees of protection.
NEW QUESTION # 15
A small business wants to have all of their macOS devices enroll in Chrome Enterprise Core. They do not have a Mobile Device Management solution but do maintain a base image for their Mac computers Where should they put the enrollment token*?
- A. /Library/Google/Chrome/Enrollment/DeviceManagementToken
- B. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\CloudManagementEnrollmentToken
- C. /Library/Google/Chrome/CloudManagementEnrollmentToken
- D. /etc/opt/chrome/policies/enrollment/CloudManagementEnrollmentToken
Answer: C
Explanation:
For macOS devices without MDM, the enrollment token can be embedded in the base image. The correct path for placing the cloud management enrollment token on macOS is `/Library/Google/Chrome
/CloudManagementEnrollmentToken`. The other paths listed are for Windows Registry (A), a non-standard Linux path (C), and a potentially incorrect macOS path (D).
NEW QUESTION # 16
An administrator identifies that the next major Chrome release, Chrome 130, has an issue with oneof their critical business applications. The company's Chrome browsers are currently on version 129.0.6568.91. The administrator needs to prevent browsers from updating to Chrome 130, while allowing continued updates within the Chrome 129 major version.
Which target version prefix should the administrator use in the updates setting to achieve this?
- A. 129.
- B. 129(
- C. 129'"
- D. 0
Answer: A
Explanation:
To target all updates within the 129 major version, the administrator should use the target version prefix `129.
`. This tells Chrome to stay within the 129 branch and accept minor updates (like 129.0.x.y to 129.1.x.y) but not to upgrade to the next major version (130). The other options are not the correct syntax for specifying a major version prefix for target updates.
NEW QUESTION # 17
When a Chrome browser under cloud management goes to a potentially risky website, that action is logged in the Audit and Investigation Report as what type of event"?
- A. SSL Error
- B. Site Warning Unsafe Site Visit
- C. Site Isolation Violation
- D. Untrusted Site Visit
Answer: B
Explanation:
When Chrome's Safe Browsing feature identifies a website as potentially risky and displays a warning page that the user might bypass to visit the site, this interaction is typically logged in the Audit and Investigation Report as a "Site Warning Unsafe Site Visit" event. This allows administrators to track instances where users might be exposed to potentially malicious content despite browser warnings. SSL errors relate to certificate issues, untrusted site visit is a more general term, and site isolation violation refers to a different security mechanism.
NEW QUESTION # 18
An end user is returning from an extended leave of absence and finds their browser is no longer active The administrator is not sure if the inactivity policy has been violated What is the minimum action necessary to re-enroll this browser?
- A. Close and reopen Chrome
- B. Delete the browser from CEC and reopen Chrome
- C. Verify the policy has been violated and then wipe the browser
- D. Delete the device management token and reopen Chrome
Answer: D
Explanation:
If a browser becomes inactive due to policy, the device management token likely needs to be refreshed or re- established. Deleting the token and then reopening Chrome will typically trigger the browser to attempt re- enrollment and obtain a new token, bringing it back under management. Wiping the browser or deleting it from the CEC might be necessary in more severe cases but is not the minimum action. Simply closing and reopening Chrome might not be sufficient if the token has expired or been invalidated.
NEW QUESTION # 19
Which operating system must be used to self-host a Chrome extension*?
- A. Linux
- B. ChromeOS
- C. Windows 11
- D. macOS
Answer: A
Explanation:
While the provided study guide doesn't explicitly detail the OS requirements for self-hosting Chrome extensions, general web hosting best practices suggest that Linux is a common and robust platform for serving files and managing web-related services. Its open-source nature, command-line interface, and extensive server software support make it well-suited for self-hosting compared to desktop-centric operating systems like Windows 11 or macOS, and the client-focused ChromeOS. Self-hosting typically involves setting up a web server to distribute the extension files, a task commonly performed on Linux servers.
NEW QUESTION # 20
Which data point is available in the Chrome Versions report\*?
- A. Total Browsers
- B. Last update
- C. Inactive Browsers
- D. Active Browsers
Answer: D
Explanation:
The Chrome Versions report specifically focuses on the distribution of different Chrome browser versions across the managed fleet. A key data point in this report is the number of "Active Browsers" on each version, allowing administrators to understand their update status and identify any significant fragmentation. While
"Total Browsers" might be a related metric, the core focus of the "Versions" report is on the active instances and their respective versions. Information on "Inactive Browsers" or the "Last update" time for individual browsers might be found in other reports.
NEW QUESTION # 21
What is the schedule for Chrome stable channel major releases'?
- A. Every 28 days (every four weeks)
- B. The second Tuesday of every month
- C. Once a quarter (every three months)
- D. Whenever new features are added
Answer: A
Explanation:
The Chrome release cycle for the Stable channel is approximately every four weeks. This consistent schedule allows administrators to anticipate and plan for new feature deployments and potential compatibility testing.
While security updates can occur more frequently and are often released on Tuesdays, major version updates follow this roughly monthly cadence.
NEW QUESTION # 22
A Chrome administrator is using both Cloud policies and Local policies to apply settings to Chrome browsers The administrator wants to ensure that on Windows computers, the Cloud policies will have precedence if Cloud and Local policies conflict What Registry value can be created under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome to achieve this?
- A. "Value: PolicyOverridePreference Type REG_SZ Data Cloud"
- B. "Value PolicySupercedence Type REG_SZ Data Cloud"
- C. "Value: CloudPolicyOverridesPlatformPolicy Type REG_DWORD Data 1"
- D. "Value: LocalPolicyOverride Type: REG_DWORD Data 0"
Answer: C
Explanation:
To ensure cloud policies override local policies on Windows, the administrator needs to create a specific Registry value. The correct value is `"CloudPolicyOverridesPlatformPolicy"` of type `REG_DWORD` with data `1`. This setting explicitly tells the Chrome browser to prioritize cloud-managed policies over local policies.
NEW QUESTION # 23
An organization experiences a recent surge in account takeovers and suspicious activity Upon investigation a security team discovers that employees are falling victim to infostealer malware specifically designed to target Chrome browser cookies This malware is spreading through phishing emails and compromised websites, and it is capable of stealing session cookies, login credentials,and other sensitive information stored in the browser Which measure can an administrator implement using Chrome Enterprise Core to mitigate the risks posed by cookie theft?
- A. Require Enhanced Safe Browsing and enable Application Bound Encryption
- B. Disallow Chrome Sync and Require Incognito mode
- C. Block the use of third-party cookies
- D. Invalidate user's session cookies and tokens by resetting the sign-in cookies from the Google Admin console
Answer: A
Explanation:
To combat cookie theft from infostealer malware, requiring "Enhanced Safe Browsing" provides proactive protection against malicious websites and downloads that might distribute such malware. Enabling
"Application Bound Encryption" adds an extra layer of security to cookies and other sensitive data stored by Chrome, making them harder for malware to use even if stolen. Blocking third-party cookies (option A) can improve privacy but doesn't directly prevent malware from stealing first-party session cookies. Invalidating existing cookies (option C) is a reactive measure and doesn't prevent future theft. Disallowing Chrome Sync and requiring Incognito mode (option D) changes user behavior but doesn't inherently protect against malware on the local machine.
NEW QUESTION # 24
Which percentage of Chrome is recommended during Beta before general availability'?
- A. 2%
- B. 5%
- C. 1%
- D. 10%
Answer: B
Explanation:
While the exact percentage isn't explicitly stated in the provided material, industry best practices for software deployment, including browser updates, recommend testing in a Beta environment with a representative but limited subset of users before a full rollout. A common recommendation for Beta testing is around 5% of the user base. This provides sufficient feedback and issue detection without impacting the majority of users.
NEW QUESTION # 25
An IT administrator manages a large organization that uses Chrome browser across multiple platforms including Windows, macOS, and Linux The organization has diverse user needs and varying levels of risk associated with different departments, for which the administrator must determine the most efficient method to manage Chrome updates across the organization Why is it advantageous to manage Chrome update policies using the Google Admin console instead of the Group Policy Management Console (GPMC)?
- A. The Google Admin console does not allow administrators to view the browser version of any given managed device as Group Policy does
- B. The Google Admin console is only applicable to devices with ChromeOS, making it more secure
- C. Group Policy does not support platforms other than Windows
- D. Group Policy does not support Chrome update policies
Answer: C
Explanation:
The key advantage of using the Google Admin console for managing Chrome updates in a multi-platform environment is its ability to apply policies consistently across Windows, macOS, and Linux devices. Group Policy (GPMC) is a Windows-specific tool and cannot natively manage Chrome updates on other operating systems. The Google Admin console provides a centralized and platform-agnostic approach to Chrome management.
NEW QUESTION # 26
To reduce risk, an organization is required to maintain a minimum Chrome browser version. The organization allows updates but finds that not all browsers are within one major version of the stable release.
Which policy option would help an admin enforce Chrome browser updates to the latest major stable version via automatic updates'?
- A. Relaunch notification
- B. Rollback to target version
- C. Auto-update check period
- D. Component updates
Answer: C
Explanation:
While not directly stating "enforce to the latest major stable version," the "Auto-update check period" policy, when configured appropriately (shorter intervals), ensures that devices check for andapply updates more frequently. This increases the likelihood of browsers reaching and staying closer to the latest stable version over time. "Rollback to target version" is for reverting updates, "Component updates" manages specific browser components, and "Relaunch notification" prompts users to restart after an update.
NEW QUESTION # 27
An organization is deploying 50 new devices which will be managed by a Mobile Device Management solution Which method should be used to enroll the Chrome browser on those devices into Chrome Enterprise Core?
- A. Use Google Admin to generate an enrollment token and distribute it using mobile device management software
- B. Generate a single device enrollment token and email it to all users, instructing them to enroll their devices individually
- C. Use Google Admin to generate 50 individual device registration keys and distribute them using mobile device management software
- D. Use Google Admin console bulk enrollment feature to generate a set of unique tokens, and thendistribute them via secure file sharing platform
Answer: A
Explanation:
The study guide emphasizes using enrollment tokens generated in the Google Admin console for enrolling browsers. When using an MDM solution, the most efficient and recommended method is to generate a single enrollment token and then deploy it to the devices through the MDM software. This allows for automated and scalable enrollment. Bulk enrollment features in the Admin console are typically for direct enrollment, not through MDM. Individual tokens or keys would be inefficient for a large deployment.
NEW QUESTION # 28
What policy and value provides the most protection against malicious websites?
- A. Enable site isolation for all websites
- B. Set the site isolation policy to be required for all websites
- C. Set the Safe Browsing policy to Enhanced mode
- D. Allow the user ability to bypass Safe Browsing warnings
Answer: C
Explanation:
Setting the **Safe Browsing policy to Enhanced mode** provides the most direct and comprehensive protection against malicious websites by leveraging Google's real-time threat intelligence. Allowing users to bypass warnings (option A) defeats the purpose of Safe Browsing. While site isolation (options C and D) protects against cross-site data leakage, it doesn't directly prevent users from accessing malicious sites in the first place. Enhanced Safe Browsing actively warns and blocks access to dangerous websites.
NEW QUESTION # 29
What report types are available in Google Chrome Enterprise Core on the Chrome Insights Report page'?
- A. Devices that need attention, Devices that need to be purchased, Devices that have been used by family members
- B. Chromium browsers, Devices that need to be purchased, Devices that have been used by family members
- C. Browsers pending updates, Browsers without activity in the past 28 days, Browsers that have been recently enrolled
- D. Device Fleet Hardware report, Browsers that need attention, Chromium browsers
Answer: C
Explanation:
The Chrome Insights Report in the Google Admin console provides visibility into the managed Chrome browser environment. Key report types available here include "Browsers pending updates" to identify devices needing patching, "Browsers without activity in the past 28 days" to understand browser usage, and
"Browsers that have been recently enrolled" for monitoring onboarding. The other options list reports that are either not specific to Chrome Insights or related to device hardware rather than browser status.
NEW QUESTION # 30
An organization uses Chrome Enterprise Core and needs to enforce specific security policies (e.g., disabling extensions, restricting website access) only for employee work-related browsing Personal browsing should remain unrestricted Which approach is most appropriate?
- A. Use a single managed profile for all users, configuring separate work and personal bookmarks to manage access
- B. Require a managed profile for work-related browsing, applying the policies to only that profile
- C. Require a managed browser for work-related browsing, applying the policies to all browser windows
- D. Use a managed browser and set exceptions for personal use in the enterprise policies
Answer: B
Explanation:
The most granular and appropriate approach to apply work-related policies without affecting personal browsing is to use **managed profiles**. By requiring users to use a specific managed profile for work purposes, administrators can enforce policies only within that profile. Personal browsing in a separate, unmanaged profile will remain unaffected. Option A would apply policies to all browsing, which is not the requirement. Option C relies on bookmarks, which is not a security enforcement mechanism. Option D is generally not feasible as enterprise policies are designed to be enforced, and setting reliable exceptions for personal use within a managed browser is complex and less secure than using separate profiles.
NEW QUESTION # 31
A company uses Chrome Enterprise Core to manage Chrome browsers for its employees and contractors who share devices They need a way to ensure the following:
* Full-Time Employees (FTEs) can only see and use extensions assigned to them
* Contractors can only see and use extensions assigned to them
* Both FTEs and contractors have access to a set of shared extensions
How can the Chrome administrator configure Chrome Enterprise Core to achieve this'?
- A. Create Organizational Units (OUs) for Shared devices, assign shared extensions to the OU. Create a separate group in the Google Admin Console for FTEs. Assign extensions to the group based on their needs
- B. Create separate groups in the Google Admin Console for FTEs and Contractors. Assign extensions to respective groups based on their needs
- C. Create Organizational Units (OUs) for Shared devices, assign shared extensions to the OU. Use Group Policy Objects to assign specific extensions by user group
- D. Ask users to install all the extensions they need on the shared device
Answer: A
Explanation:
The most effective way to manage extensions in this scenario is to use a combination of OUs and groups.
Create an OU for the shared devices and force-install the shared extensions at this OU level. Then, create separate user groups for FTEs and Contractors in the Google Admin console and force-install their specific extensions to these groups. User group policies have a higher precedence than OU policies, ensuring the correct extensions are available to each user type when they sign in to the shared devices. Option A mentions Group Policy Objects, which are for Windows environments and less relevant in a cloud-managed scenario across potentially different OSes. Option B doesn't address the shared device aspect effectively. Option C is not a managed approach.
NEW QUESTION # 32
An administrator wants users to have the ability to install extensions of their choosing However, due to company security policies, the administrator cannot allow any extension to be installed that has the ability to read documents on the local drive Which policy combination best meets the administrator's need?
- A. Chrome Webstore: Block all apps, admin manages allowlist; Block extensions by permission: Sync File System
- B. Chrome Webstore: Allow all apps, admin manages blocklist; Block extensions by permission: File System
- C. Chrome Webstore: Allow all apps, admin manages blocklist; Runtime Blocked Hosts: file:///*
- D. Chrome Webstore: Allow all apps, admin manages blocklist; Runtime Blocked Hosts: C:\*
Answer: B
Explanation:
To allow users to install extensions while blocking those with specific risky permissions, the administrator should "Allow all apps" from the Chrome Web Store and then use the "Block extensions by permission" policy to block extensions that request the "File System" permission. This prevents extensions from accessing local files. Option A is too restrictive by blocking all apps by default. Options B and D use "Runtime Blocked Hosts," which is for controlling access to specific websites, not for blocking extension permissions.
NEW QUESTION # 33
......
Get The Important Preparation Guide With Chrome-Enterprise-Administrator Dumps: https://braindumps.actual4exams.com/Chrome-Enterprise-Administrator-real-braindumps.html