Architecting Cross-Cloud Identity GCAD Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has a web application hosted in AWS that needs to authenticate users from a partner organization using their own identity system. The partner uses a legacy identity provider that only supports SAML. The application currently supports OIDC. What is the most appropriate way to enable this integration?

   • AConfigure the application to accept SAML directly by adding a SAML plugin.
   • BAsk the partner to upgrade their identity provider to support OIDC before integration.
   • CDeploy a federation gateway that translates SAML assertions from the partner IdP into OIDC tokens for the application.
   • DCreate local user accounts in AWS for each partner user and manually assign permissions.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization uses Azure AD as its identity source and is adopting Google Cloud. They need to ensure that user attributes like 'cost center' are available in Google Cloud for resource labeling and access decisions. The organization wants to avoid manual data entry. What should they implement?

   • AUse a federation trust and rely on the IdP to pass attributes in the SAML assertion.
   • BUse a provisioning tool to synchronize Azure AD users and their attributes to Google Cloud Identity.
   • CCreate a custom script that exports Azure AD attributes to a CSV file and imports them into Google Cloud weekly.
   • DManually create users in Google Cloud and copy attributes from Azure AD as needed.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which identity provider (IdP) strategy involves using a single IdP as the authoritative source for all user identities and having each cloud provider trust that IdP?

   • ACentralized IdP strategy
   • BFederated IdP strategy
   • CDistributed IdP strategy
   • DDecentralized IdP strategy
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In a federated identity model, what is the role of the identity provider (IdP) in relation to a cloud service provider (SP)?

   • AThe IdP acts as a proxy that forwards the user's password to the SP for verification.
   • BThe IdP authenticates the user and provides an assertion that the SP trusts to grant access.
   • CThe IdP stores all of the SP's resource data and access policies.
   • DThe IdP creates and manages all user accounts within the SP's directory.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a primary advantage of using multiple identity providers (IdPs) in a cross-cloud architecture?

   • AIt guarantees that all users have the same access permissions across all clouds.
   • BIt simplifies the user experience by requiring only one set of credentials.
   • CIt avoids a single point of failure for authentication and allows different parts of the organization to maintain autonomy over their identity sources.
   • DIt eliminates the need for trust relationships between clouds.
   Reveal Solution Discussion Select an answer first