Chrome-Enterprise-Administrator Sample Questions Answers

By default, when a Chrome browser on a Windows device is enrolled in Chrome Enterprise Core, cloud-based machine policies will take precedence over locally configured machine policies (Group Policy). This ensures that the centrally managed cloud policies are enforced.

===========

When managing inactive device tokens, the "Renew Token" option is crucial for allowing devices to re-enroll after a period of inactivity. If the token is revoked, invalidated, or deleted, the device will likely require a manual re-enrollment process. Renewing the token provides a mechanism for the device to check back in and remain managed.

===========

Given that the MV2 extensions are not critical, and the requirement is to either block or upgrade, the most direct and efficient approach is to configure the "Manifest V2 availability" policy. This policy allows administrators to control the usage of Manifest V2 extensions, including blocking them entirely or allowing them until a specified date. Option A involves manually collecting and blocking each extension, which is less efficient. Option C ("removed") is not a standard installation mode policy. Option D is not a policy that an administrator can directly configure; the upgrade to MV3 is a developer-driven process.

===========

While the exact percentage isn't explicitly stated in the provided material, industry best practices for software deployment, including browser updates, recommend testing in a Beta environment with a representative but limited subset of users before a full rollout. A common recommendation for Beta testing is around 5% of the user base. This provides sufficient feedback and issue detection without impacting the majority of users.

===========

A "warning conflict" in `chrome://policy` indicates that multiple policy sources are trying to control the same setting. Since the browsers were previously managed by Group Policy, there's likely a conflict between the cloud policy and the local Group Policy. The best way to resolve this is to **check and configure the precedence order** of policy sources. Ensure that Cloud Policy is set to have the desired precedence over Group Policy if that's the intention. Restarting the computer might apply existing policies but won't resolve the conflict in precedence. Adjusting a "policy merge list setting" is not a standard term for resolving this type of conflict. Re-enrolling might give a fresh start but doesn't address the underlying conflict in policy sources.

===========

While the provided study guide doesn't explicitly detail the OS requirements for self-hosting Chrome extensions, general web hosting best practices suggest that Linux is a common and robust platform for serving files and managing web-related services. Its open-source nature, command-line interface, and extensive server software support make it well-suited for self-hosting compared to desktop-centric operating systems like Windows 11 or macOS, and the client-focused ChromeOS. Self-hosting typically involves setting up a web server to distribute the extension files, a task commonly performed on Linux servers.

===========

To prevent a child OU from inheriting a policy set at a parent OU, the administrator needs to configure the policy within the child OU itself and set its inheritance status to "Locally applied." This explicitly overrides the inherited policy from the parent with a specific setting for the child OU. Setting it to locally applied at the parent would not prevent inheritance. Turning off inheritance entirely might not be desired for other policies, and "Child > Parent" is the default precedence when inheritance is enabled.

===========

To allow users to install extensions while blocking those with specific risky permissions, the administrator should "Allow all apps" from the Chrome Web Store and then use the "Block extensions by permission" policy to block extensions that request the "File System" permission. This prevents extensions from accessing local files. Option A is too restrictive by blocking all apps by default. Options B and D use "Runtime Blocked Hosts," which is for controlling access to specific websites, not for blocking extension permissions.

===========

Clearing the browser's cache and cookies is a common first-line troubleshooting step for issues related to website access and login problems. Outdated or corrupted cached data and cookies can often interfere with website functionality and authentication processes. The Google Admin console provides remote actions to "Clear Cache," "Clear Cookies," or both. Options B, C, and D include actions that are either more disruptive (restart browser, logout user, restart user session) or not standard remote actions available for managed Chrome browsers through the Admin console (delete temporary files, delete swap file).

===========

Chrome checks for extension updates periodically when the browser is running. This check typically happens within the first few minutes of launching Chrome and then again every few hours. While updates are triggered by developers publishing to the Chrome Web Store, the actual update on the user's browser happens when Chrome is active and performs these periodic checks. Option A is incorrect as extensions generally don't update when Chrome is not running. Option C describes a manual update process, which is not the default behavior. Option D is incorrect because the update on the user's end is dependent on Chrome being active and checking for updates.

===========

Chrome's Safe Browsing feature actively scans web pages, downloads, and extensions for known malware. When malware is detected, it is reported as a security event. While unauthorized file downloads could be a consequence of a security issue, Chrome's direct detection focuses on the malware itself. Password complexity is a setting for password management, and user inactivity is a system or application-level event, not a direct security event captured by Chrome in the same way as malware detection.

===========

The Chrome Insights Report in the Google Admin console provides visibility into the managed Chrome browser environment. Key report types available here include "Browsers pending updates" to identify devices needing patching, "Browsers without activity in the past 28 days" to understand browser usage, and "Browsers that have been recently enrolled" for monitoring onboarding. The other options list reports that are either not specific to Chrome Insights or related to device hardware rather than browser status.

===========