Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Google
Exam Format
120 min
50-60
75%
Associate
Registration
$125 USD
Kryterion Online Proctoring, Kryterion Test Center, or online proctoring
English, Japanese
Validity
3 years
Retake and pass the current version of the exam before expiration; Renewal eligibility begins 180 days before certification expiration; 50% off renewal discount code provided at initial certification
GCP-AGWA Exam Topics and Domains
GCP-AGWA is organized into 6 weighted domains. Expect to work with Google Admin Console, Google Drive, Google Vault, Gmail, and more.
1
Managing User Accounts, Domains, and Directory
20%
Managing the User Life Cycle
Basic Migration StrategiesManual User Account CreationAutomated User Provisioning and DeprovisioningThird-Party Identity Provider (IdP) IntegrationBasic SAML SSO ConfigurationFirst-Party Sync ToolsUser Attribute ModificationAccount Lifecycle ActionsDrive Data Ownership TransferLicense ManagementPassword Administration
- Identify basic migration strategies and match them with the appropriate Google tool
- Manually create user accounts
- Automate the provisioning and deprovisioning of users
- Use a third-party identity provider (IdP) to provision and authorize users
- Configure basic SAML SSO
- Identify use cases for first-party sync tools (e.g., Directory Sync, GCDS)
- Modify user attributes (e.g., names, email addresses, passwords, aliases)
- Delete, suspend, restore, and archive accounts
- Transfer ownership of Drive data to another account
- Manage licenses
- Administer passwords (e.g., password resets, forcing password changes, monitoring password strength)
Designing and Creating Organizational Units (OUs)
OU Hierarchy DesignOU Management
- Design the OU hierarchy in alignment with an organizational structure while following Google-recommended practices
- Create and manage OUs for users and other objects
Managing Groups
Groups Structure DesignDistribution ListsShared Mailboxes (Collaborative Inbox)Dynamic GroupsSecurity Groups
- Design a groups structure
- Create and manage distribution lists
- Create and manage shared mailboxes (Collaborative Inbox)
- Create and manage dynamic groups
- Create, manage, and apply settings to security groups
Managing Domains
Domain Verification and ManagementDomain Aliases
- Add and verify primary and secondary domains
- Manage domain aliases
Managing Buildings and Resources
Buildings and RoomsResource ManagementResource Booking PermissionsResource Features
- Create buildings and rooms in bulk
- Create and manage new resources for booking and scheduling
- Establish resource booking permissions
- Create features to add specific details to resources (e.g., capacity, whiteboard, wheelchair accessible)
2
Managing Core Workspace Services
23%
Configuring Gmail
MX Records and Email RoutingContent Compliance RulesSpam, Phishing, and Malware SettingsEmail Attachment and Access SettingsEmail Security PracticesEmail Data MigrationGmail Delegation and Compliance
- Configure MX records for email routing
- Configure basic mail routing scenarios
- Use content compliance rules to filter and route emails based on their content
- Configure spam, phishing, and malware settings
- Manage email attachment size limits and blocked file types
- Configure Gmail forwarding and POP/IMAP access
- Implement Google-recommended email security practices (SPF, DKIM, DMARC)
- Migrate email data to and from Gmail
- Explain how to delegate Gmail access to other users
- Manage compliance footers and email quarantines
Configuring Google Drive and Docs
Sharing and Trust RulesDrive Settings and StorageTemplates and Ownership
- Configure default sharing options for new files
- Identify when Drive trust rules should be used
- Configure Drive settings to limit external sharing based on organizational policies
- Manage target audiences
- Manage settings for custom Docs templates
- Create and manage Shared Drives
- Set and adjust storage quotas for individual users or OUs
- Allow or disallow Google Drive for desktop
- Transfer ownership of files and folders to other users
- Manage Drive Labels
- Enable and disable offline access
Configuring Google Calendar
Resource Calendars and BookingCalendar Sharing and Delegation
- Create and manage resource calendars (e.g., meeting rooms, equipment)
- Configure booking policies for resources
- Delegate calendar and resource access to another user
- Set default internal sharing options for primary and secondary calendars
- Configure shared calendars for teams or groups
- Manage external sharing options for calendars
- Transfer event ownership to another user
- Prevent invitations from unknown senders
Configuring Google Meet
Meet Administration
- Enable or disable Meet for an organization or specific OUs
- Configure Meet safety settings
- Configure Meet video settings (e.g., quality, recordings, transcripts, note taking)
Configuring Google Chat
Chat Administration
- Enable or disable Chat for an organization or specific OUs
- Configure Chat settings in the Admin console (e.g., chat history, space settings, allowing outside domains, moderation)
- Manage Chat invite settings
- Add Chat apps
Using Generative AI for Google Workspace
Gemini Administration
- Determine how to keep organization data private and secure when using gen AI
- Enable or disable Gemini for an organization or specific OUs
- Enable Google Workspace extensions for the Gemini app
- Generate Gemini usage reports
Supporting Workspace Development
AppSheet and Apps Script
- Identify use cases for AppSheet and Apps Script (e.g., task automation)
- Enable AppSheet for an organization or specific OUs
3
Managing Data Governance and Compliance
15%
Using Google Vault for eDiscovery and Data Retention
Archive User LicensesRetention PoliciesData HoldsRetention Rules ManagementVault Search and ExportVault Audit Reports
- Identify use cases for archive user licenses when retaining data
- Set up retention policies for compliance purposes
- Configure data holds for legal or investigative purposes
- Create and manage retention rules to automatically retain or delete data based on specific criteria
- Use Vault's search and export capabilities
- Configure Vault settings to determine export location
- Generate audit reports to track user activity and data access
Creating and Managing Data Loss Prevention (DLP) Rules
DLP Service SupportDLP Rule ConfigurationDLP Application and Notifications
- Identify which Workspace services (Gmail, Chat, Drive) support DLP and their different capabilities
- Create and configure automatic DLP rules and actions based on content detectors or regular expressions
- Apply DLP rules to specific Workspace services (e.g., Gmail, Drive, Chat)
- Customize DLP notification messages
Creating and Managing Drive Trust Rules
Trust Rule Configuration
- Limit sharing to specific OU groups, domains, or users
- Block sharing of certain OU groups, domains, or users
- Allow or restrict sharing outside an organization (e.g., visitors, external users)
Determining How to Store and Export Environment Data
Data Export and Storage
- Manage Google Takeout settings (e.g., allowing or restricting certain data types)
- Use the Data Export tool
- Choose a geographic location for your data
- Configure legal and compliance settings based on industry regulations
Classifying Data
Data Classification Labels
- Identify use cases for applying labels to data (e.g., user classification, DLP, default classification, AI classification)
- Configure classification labels to manage files and messages (e.g., Drive, Gmail)
4
Managing Security Policies and Access Controls
20%
Securing User Access
Password and 2SV PoliciesContext-Aware AccessAdministrative Roles and DelegationSession Control
- Enforce strong password policies and two-step verification (2SV) rules
- Configure password policies and recovery options
- Configure 2SV methods (e.g., Google Authenticator app, text message, passkeys)
- Identify when to use context-aware access policies
- Apply security policies to users and groups
- Assign prebuilt and custom administrative roles to users and delegate specific administrative tasks
- Configure user signout with Google Session Control
Reporting, Auditing, and Investigating Security Risks and Events
Security Investigation and AuditSecurity CenterActivity Rules and Alerts
- Investigate and analyze logs and security events by using audit and investigation tools
- Identify security risks and threats by using the security center
- Identify gaps in security-related configurations by using the security health page
- Create activity rules and alerts
Enabling Additional Google and Third-Party Applications
Marketplace and Application ManagementSSO and Third-Party Services
- Manage the Marketplace allowlist
- Deploy and restrict Google Workspace Marketplace and Google Play Store applications
- Configure SSO in third-party applications
- Manage access to additional Google services (e.g., AdSense and YouTube) for a specific set of users
- Remove connected applications and sites
5
Managing Browsers and Endpoints
10%
Managing Mobile Devices
Mobile Management SolutionsMobile Security PoliciesDevice Visibility and Offboarding
- Determine when to use a basic, advanced, or third-party mobile management solution
- Apply security policies to mobile devices by using Google basic mobile management
- Maintain visibility and control over registered devices, including both company-owned and BYOD
- Offboard mobile devices from former employees
Managing Chrome Browsers
Chrome Browser Management
- Apply Chrome browser policies (e.g., offline access, update policies)
- Enroll browsers and apply policies
- Manage extensions and apps (e.g., allowing, blocking, force-installing) based on OUs or groups
6
Monitoring and Troubleshooting Common Issues
12%
Identifying and Diagnosing Workspace Issues
Audit Log NavigationService Status MonitoringMail Delivery Issue Resolution
- Navigate the Admin console to access audit logs
- Interpret log entries to identify error messages, unusual activity, or patterns
- Check the Google Workspace Status Dashboard for service disruptions or outages
- Recommend a solution related to mail delivery issues
Troubleshooting and Resolving Common Issues
User Account and Access TroubleshootingEmail TroubleshootingCalendar TroubleshootingDrive TroubleshootingMeet Troubleshooting
- Troubleshoot problems with user accounts, passwords, 2-step verification, or access to services
- Troubleshoot email delivery problems using Email Log Search
- Troubleshoot email delivery problems using user-provided message headers and Google Admin Toolbox
- Assist users with troubleshooting email forwarding, filters, or labels
- Troubleshoot Calendar events that are not syncing or displaying correctly
- Troubleshoot issues with calendar sharing or managing permissions
- Troubleshoot Calendar issues with sharing free/busy information
- Troubleshoot Drive issues with sharing and managing permissions
- Resolve problems with Drive for Desktop
- Recover accidentally deleted files in Drive or mail in Gmail
- Troubleshoot Drive offline access issues
- Diagnose network performance issues using the Meet quality tool
- Troubleshoot Meet issues (e.g., users unable to access Meet events)
Viewing, Creating, and Managing Reports and Audit Logs
Reporting and Monitoring
- Monitor app usage
- Monitor storage limits
- Use the audit reports to check and monitor device activity
Using Support Resources
Support and Diagnostics
- Document steps taken by the end user to reproduce an issue
- Collect appropriate log file types
- Search for an application's status and known issues
- Generate HAR files
- Identify Google-recommended practices to open a case with Google Support
- Use the Google Workspace updates blog, status dashboard, and release calendar to identify service releases and disruptions
How do I earn this certification?
Passing GCP-AGWA earns the Google Cloud Certified - Associate Google Workspace Administrator certification. It sits in the Google Workspace Administration track.
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for GCP-AGWA is by using the PlanetCert Simulator to practice questions and review detailed explanations.
Who should take this exam?
- 6 months of Google Workspace Super Admin experience in a real or test environment
- Hands-on experience with Business Plus edition
- Knowledge of Enterprise Edition features and functionality