An employee accidentally deletes a critical project folder from their Drive and then empties the trash. The folder was not under any specific legal hold or custom retention rule. Can an administrator use Google Vault to restore the folder back to the employee’s active Drive?

A. Yes, Vault automatically keeps a copy of all data and can restore it directly.

B. No, Google Vault is designed for eDiscovery and archiving, not for restoring data to user accounts.

C. Yes, but only if the administrator exports the data from Vault and then manually re-uploads it.

D. No, once an item is emptied from the trash, it’s permanently deleted from all Google systems immediately.

A user’s account is under a legal hold. The organization’s default retention rule for Gmail is set to purge messages after 2 years. What is the status of a 3-year-old email in that user’s account?

A. The email is purged because it is older than the 2-year retention period.

B. The email is preserved indefinitely until the legal hold is removed.

C. The email’s status depends on whether a custom rule also applies.

D. The email is archived but cannot be searched until the hold is lifted.

An administrator needs to search for all Google Chat messages related to ‘Project Titan’. However, they discover that messages from one key user, who had ‘conversation history’ turned off, are not appearing. Why is this happening?

A. The administrator used the wrong search keywords for the project.

B. The user’s Vault license has expired, preventing their data from being searched.

C. Vault can only retain Chat messages if the ‘conversation history’ setting is turned on.

D. There is a 24-hour delay before new Chat messages are indexed and searchable in Vault.

An organization sets up a custom retention rule for a specific OU to keep Drive files for 7 years. The default rule for the entire domain is 3 years. For a user in that OU, which rule applies to their Drive files?

A. The 3-year default rule applies, as it covers the entire domain.

B. The 7-year custom rule applies, as custom rules take precedence over default rules.

C. Both rules apply, and the data will be purged after 3 years.

D. Neither rule applies until a legal hold is also placed on the OU.

A legal team needs to export all data related to an investigation. The Vault administrator runs the export successfully. The legal team tries to download the export files 20 days later. What will they find?

A. The export files are available for download indefinitely.

B. The export has been automatically deleted and is no longer available for download.

C. The export files have been moved to a permanent archive in Google Drive.

D. The download requires re-authentication from a super administrator.

You need to find a Google Site using Vault search. What is the correct way to specify the site in the search query?

A. By searching for the URL of a specific page within the site.

B. By entering the published site URL, like sites.google.com/domain/site-name.

C. By searching for the site owner’s email address and the keyword ‘Google Sites’.

D. By searching for the underlying folder name in Google Drive where the site is stored.

An administrator needs to place a hold on all data within a specific shared drive related to a sensitive project. Is this possible in Google Vault?

A. No, holds can only be applied to individual user accounts.

B. Yes, legal holds can be scoped to include specific shared drives.

C. No, you must place every member of the shared drive on an individual hold.

D. Yes, but only if the shared drive is owned by a super administrator.

An organization needs to retain Google Meet recordings and their associated logs. How are these items handled by Vault retention policies by default?

A. They are not retainable in Vault.

B. They are covered by dedicated Meet retention rules that must be created first.

C. They are covered by Google Drive retention rules, as they are stored in the organizer’s Drive.

D. They are covered by Gmail retention rules, as the link is sent via email.

An administrator is trying to search for content within an MP4 video file stored in a user’s Google Drive. The search for keywords spoken in the video yields no results. Why?

A. The video file is too large for Vault to process.

B. The administrator lacks the proper privileges to search video content.

C. Vault can search video metadata (like the title), but not the audio or visual content within the file.

D. The video file must first be placed on a legal hold to become searchable.

To organize an eDiscovery project for a legal case named ‘Case-123’, what is the first and most fundamental step an administrator should take inside Google Vault?

A. Immediately place all potentially relevant users on a legal hold.

B. Create a new ‘matter’ to serve as a dedicated workspace for the case.

C. Run a broad keyword search across the entire domain to identify data.

D. Export a full audit log of all recent administrator activity.

An organization has a default retention rule to purge Gmail messages after 2 years. A specific user is placed on a legal hold related to ‘Project Alpha’. What happens to a 3-year-old email in that user’s inbox?

A. The email is immediately purged because it has exceeded the 2-year retention period.

B. The email is preserved indefinitely until the legal hold is removed from the user’s account.

C. The email is subject to the retention rule unless it contains the keyword ‘Project Alpha’.

D. The email is deleted, but a log of its existence is retained for the audit trail.

A junior administrator reports that after a user accidentally deleted a critical report from Drive and emptied their trash, the file cannot be restored using Vault. Why is this expected behavior?

A. The administrator does not have the correct privileges to perform a restore operation.

B. The file must be under a legal hold to be eligible for restoration from Vault.

C. Google Vault is an eDiscovery and archiving tool, not a data backup and recovery solution.

D. There is a 24-hour waiting period after deletion before a file can be accessed in Vault.

An administrator needs to begin an eDiscovery process for a new internal investigation. What is the correct first step to take inside the Google Vault interface?

A. Create a new custom retention rule to cover the anticipated data.

B. Run a domain-wide search for relevant keywords to scope the investigation.

C. Create a new ‘matter’ to serve as a workspace for the investigation.

D. Assign Vault privileges to the legal team members who will be involved.

During a search for Google Chat messages, an administrator notices that conversations from a specific Chat space are missing. All users have Vault licenses. What is the most likely reason?

A. The Chat space was created by an external user.

B. Conversation history was turned off for that specific Chat space.

C. The messages contained only linked Drive files, which are not indexed.

D. A custom retention rule is set to purge messages from that space immediately.

An export of Gmail messages was successfully completed on July 1st. On July 20th, the legal team requests the download link. What will the Vault administrator find when they check the ‘Exports’ tab?

A. The export is still available for download.

B. The export has been automatically deleted and is no longer available.

C. The export has been archived and can be retrieved by a super administrator.

D. The export is available, but the download link has expired and must be regenerated.

An organization wants to retain files in a specific OU for 7 years, while the domain-wide default rule is 3 years. A shorter, 1-year custom rule based on a Drive label also applies to some files in that OU. For a file with that label, how long is it retained?

A. 3 years, according to the default rule.

B. 1 year, as the most specific rule (label-based) applies.

C. 7 years, as Vault retains the data based on the applicable rule with the latest expiration date.

D. The rules conflict, so Vault will flag the item for manual review.

An administrator is attempting to search for a specific new Google Site. Which of the following search methods is correct?

A. Searching in the Gmail service for emails containing a link to the site.

B. Selecting ‘Drive’ as the service and entering the published site URL.

C. Selecting ‘Sites’ as a top-level service and searching by the site’s title.

D. Searching the Drive folder where the site’s assets are stored.

A Google Workspace super administrator needs to manage legal holds in Vault, but they do not have a Vault license assigned to their own account. Can they still perform this function?

A. No, a Vault license is required for any user to access the Vault interface.

B. Yes, an administrator can be granted Vault privileges without having a Vault license themselves.

C. No, only users with a Vault license can manage holds to ensure their actions are audited.

D. Yes, but they can only manage holds for users who are in the same organizational unit.

An administrator is trying to find evidence by searching the content of video and audio files in Drive. The search yields no results for keywords spoken in the files. Why?

A. The files are client-side encrypted, which blocks all content searching.

B. The search is timing out because video and audio files are too large.

C. Vault indexes text-based content and file metadata, but not the content of video or audio files.

D. The ‘Include media content’ option was not selected in the search parameters.

A well-intentioned administrator places a legal hold on the top-level organizational unit to ensure no data is accidentally deleted during a company-wide audit. What is a significant and unintended negative consequence of this action?

A. It significantly slows down search performance across the entire domain.

B. It uses a large number of the organization’s available Vault licenses.

C. It prevents the deletion of any Google Workspace user account from the organization.

D. It automatically creates a ‘matter’ for every user in the organization, cluttering the interface.

a) To serve as a traditional data backup solution for Google Workspace.

b) To provide information governance and eDiscovery capabilities for Google Workspace data.

c) To enhance the performance of Google Workspace applications.

d) To migrate data between different cloud platforms.

a) Retain

b) Hold

c) Restore

d) Export

a) Yes, it can fully restore deleted user data.

b) No, it is primarily an eDiscovery and archiving tool and cannot restore data to user accounts.

c) Only for specific Google services.

d) It depends on the Google Workspace edition.

a) The data is immediately purged.

b) The legal hold is overridden by the retention rule.

c) The data remains preserved indefinitely until the hold is removed.

d) The data is moved to a quarantine area.

a) It automatically moves the data to cold storage.

b) It flags the data for manual review.

c) It facilitates the systematic disposal of such data, reducing the organizational data footprint.

d) It notifies the user to manually delete the data.

a) It requires local software installations on user devices.

b) It is entirely a web-based service.

c) It necessitates dedicated on-premise servers.

d) It runs as a plugin for web browsers.

a) Only a Google Workspace license for the user.

b) Only a Google Vault license for the user.

c) Both a Google Workspace license and a specific Google Vault license for the user.

d) Administrator privileges for the user.

a) To define default retention rules for the entire organization.

b) To function as dedicated workspaces for specific legal cases, internal investigations, or information requests.

c) To manage user access privileges for Google Vault.

d) To perform data migrations between Google Workspace services.

a) Always, regardless of other rules.

b) Only when a legal hold is active.

c) When no custom retention rule or legal hold is actively applied to the data.

d) After data has been exported.

a) The custom rule takes precedence, and the data is purged sooner.

b) The default rule with the longer retention period takes precedence.

c) The data is retained for an indefinite period.

d) Vault prompts the administrator to resolve the conflict.

a) Manage Exports

b) Manage Audit Logs

c) Manage Holds

d) Manage Reports

a) It remains preserved indefinitely.

b) It becomes subject to any applicable retention rules, and if none apply, it might be immediately and permanently purged.

c) It is automatically archived to a separate storage.

d) It is restored to the user’s active account.

a) Vault can search all historical data regardless of its purge status.

b) Vault can only search data that has not yet been purged from Google production systems.

c) Purged data can be searched, but not exported.

d) Searching purged data requires special permissions.

a) Microsoft Word, Excel, PowerPoint, PDF

b) HTML, TXT, RTF

c) Video, audio, image, or binary files

d) Google Docs, Sheets, Slides

a) 7 days

b) 15 days

c) 30 days

d) Indefinitely

a) Only PDF

b) PST or MBOX format

c) DOCX or XLSX

d) MP4 or SBV

a) They remain in their native Google format.

b) They are converted to standard formats (e.g., Docs to DOCX, Sheets to XLSX).

c) They are exported as unreadable binary files.

d) They are skipped during the export process.

a) The messages must be marked as “confidential.”

b) Conversation history must be turned on.

c) The messages must be sent to an external user.

d) The messages must contain attachments.

a) Administrative users automatically have all data covered by Vault’s retention policies.

b) A super administrator account is not required to assign Vault roles.

c) An administrator can manage eDiscovery tasks without their own data being automatically subject to the same Vault retention policies.

d) Administrative actions are not auditable unless the administrator has a Vault license.

a) Indefinitely preserve data for legal purposes.

b) Configure rules that preserve data for a specified duration, even if end-users delete it.

c) Export data to third-party software for analysis.

d) Restore deleted data back to a user’s active account.