Free ChromeOS-Administrator: Professional ChromeOS Administrator Exam Questions and Answers

An administrator needs to create an SSO profile so that users authenticate with a third-party identity provider. Where in the Google Admin console is this profile configured?

• AA. Devices > Chrome > Settings > Device > Sign-in settings
• BB. Security > Access and data control > API controls
• CC. Security > Authentication > SSO with third-party IdP
• DD. Account > Domains > Manage domains

An administrator turns off Guest mode at Devices > Chrome > Settings > Device for the Faculty OU. The Faculty OU contains only user accounts. The enrolled Chromebooks are in the Classroom OU, and users still see the Guest option on the sign-in screen. What is the cause?

• AA. Device settings apply to the OU that contains the enrolled devices, not the OU of the users
• BB. Chrome policies take up to 24 hours to reach a device that has already been enrolled
• CC. Device settings need a user to sign in before they apply to the sign-in screen
• DD. Guest mode can be changed only in the top-level OU of the domain

A school wants students to install only the Chrome extensions that the IT team has reviewed. Which configuration meets this requirement for the Students OU?

• AA. Force-install the reviewed extensions and leave the allow/block mode unchanged
• BB. Allow all apps and extensions and add every unreviewed extension ID to the blocklist
• CC. Block all apps and extensions and add the reviewed extension IDs to the allowlist
• DD. Pin the reviewed extensions to the shelf and leave the allow/block mode unchanged

A consulting firm lets contractors sign in to ChromeOS devices with corporate accounts that are kept in the Contractors OU. The security team wants to make sure that contractors cannot enroll new devices or re-enroll existing devices into the firm's domain. What should the administrator do?

• AA. Set Forced re-enrollment to "Device is not forced to re-enroll" for the OU that contains the contractors' devices
• BB. Set Enrollment permissions to "Do not allow users in this organization to enroll new or re-enroll existing devices" for the Contractors OU
• CC. Remove the Contractors OU from the allowed users list under Devices > Chrome > Settings > Device > Sign-in settings
• DD. Turn off Verified access for the Contractors OU under Devices > Chrome > Settings > Users & browsers

A hospital routes all web traffic through a proxy that performs SSL inspection using its own internal certificate authority. Users on managed Chromebooks in the Clinical OU see certificate warnings on every HTTPS site. What should the administrator do?

• AA. Add the proxy's internal hostname to the URL allowlist under Devices > Chrome > Settings > Users & browsers
• BB. Upload the proxy's root CA certificate under Devices > Networks > Certificates for the Clinical OU and leave the HTTPS certificate authority option cleared
• CC. Turn off SSL error overrides for the Clinical OU under Devices > Chrome > Settings > Users & browsers
• DD. Upload the proxy's root CA certificate under Devices > Networks > Certificates for the Clinical OU and select Use this certificate as an HTTPS certificate authority

A sales representative loses a managed Chromebook on a train. The CISO asks how the company can be confident that someone who removes the storage drive and attaches it to another computer cannot read the representative's locally stored files. Which statement should the administrator give?

• AA. Verified boot checks the user data partition for tampering at each startup and erases it if the drive is moved
• BB. Powerwash runs automatically after three failed sign-in attempts and removes all local files from the device
• CC. User data is encrypted on the device, and the encryption keys are protected by the TPM security chip
• DD. Each browser tab runs in a sandbox that prevents other computers from mounting the local file system

A school district plans to reuse retired computers as managed ChromeOS Flex devices in a computer lab. The administrator inventories four models that can boot from a USB drive. Which model meets the minimum requirements for installing ChromeOS Flex?

• AA. A MacBook Air with an Apple M1 processor, 8 GB RAM and a 256 GB SSD
• BB. A netbook with a 32-bit Intel Atom processor, 2 GB RAM and a 160 GB hard drive
• CC. A laptop with a 64-bit Intel Core i3 processor, 2 GB RAM and a 500 GB hard drive
• DD. A desktop with a 64-bit AMD processor, 4 GB RAM and a 64 GB SSD

An administrator wants to test upcoming ChromeOS features on a small group of devices before general release and send feedback to Google's product team. What should the administrator join?

• AA. The Chrome Beta channel on all production devices
• BB. The Google Cloud Partner Advantage program
• CC. The Chrome Enterprise Trusted Testers program
• DD. The Google Workspace Rapid Release track

A school district leaves the forced re-enrollment setting at its default value in Devices > Chrome > Settings > Device for the Students OU. A student powerwashes a district Chromebook and then tries to set it up as a personal device. What happens when the student goes through setup?

• AA. The device enrolls in the domain but moves to the top-level OU until an administrator reassigns it
• BB. The device stays at the setup screen until an administrator deprovisions it in the Admin console
• CC. The device re-enrolls in the district's domain and continues to receive the Students OU policies
• DD. The device completes setup as an unmanaged device, and the district must re-enroll it manually

A company is reassigning 30 enrolled Chromebooks from the Staff OU to a new computer lab. The devices must receive the Lab OU's device settings, including its sign-in restrictions and update settings. All other devices in the Staff OU must keep their current settings. What should the administrator do?

• AA. Powerwash the 30 devices and enroll them with a Lab OU user account
• BB. Move the 30 devices to the Lab OU at Devices > Chrome > Devices
• CC. Change the device settings in the Staff OU to match the Lab OU
• DD. Move the accounts of the lab users into the Lab OU