What is the primary benefit of automating user deprovisioning in Google Cloud Identity?

It automatically resets all user passwords

It reduces the risk of former employees retaining access to company resources

It eliminates the need for multi-factor authentication

It increases the number of available user licenses

A security team wants to monitor all actions performed by super administrators in Google Cloud. They want to be alerted when a super admin creates a new service account key or changes IAM policies. What should they do?

Use Cloud Monitoring to track super admin login events.

Use Cloud Identity API to monitor super admin activities.

Use the Admin SDK to periodically check for changes in super admin privileges.

Use Cloud Audit Logs and set up alerts on admin activity logs.

Google CloudProfessional Cloud Security Engineer

Domain 1Objective 1

1.1 Managing Cloud Identity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Part of the Configuring access domain, which accounts for 25% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

23questions here

5free pages

6concepts

25%of the exam

Questions 1–5

1foundation · easy
Which API is used to programmatically manage user accounts and groups in Google Cloud Identity?
Select an answer first
2foundation · easy
An organization wants to allow employees to sign in to Google Cloud using their existing corporate credentials from a third-party identity provider. Which federation protocol is commonly used to achieve this?
Select an answer first
3application · medium
An organization wants to automate the deprovisioning of users when they leave the company. They use Google Cloud Identity and have a script that runs daily. Which API should the script use to disable a user's account?
Select an answer first
4foundation · easy
What is the primary benefit of automating user deprovisioning in Google Cloud Identity?
Select an answer first
5expert · hard
A security team wants to monitor all actions performed by super administrators in Google Cloud. They want to be alerted when a super admin creates a new service account key or changes IAM policies. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

1.1 Managing Cloud Identity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

Which API is used to programmatically manage user accounts and groups in Google Cloud Identity?

An organization wants to allow employees to sign in to Google Cloud using their existing corporate credentials from a third-party identity provider. Which federation protocol is commonly used to achieve this?

An organization wants to automate the deprovisioning of users when they leave the company. They use Google Cloud Identity and have a script that runs daily. Which API should the script use to disable a user's account?

What is the primary benefit of automating user deprovisioning in Google Cloud Identity?

A security team wants to monitor all actions performed by super administrators in Google Cloud. They want to be alerted when a super admin creates a new service account key or changes IAM policies. What should they do?

Keep studying — Configuring access