What is a recommended practice for managing the super administrator account in Google Cloud Identity?

Use a separate, highly secure account with strong authentication and recovery options

Share the super administrator credentials among several IT staff members

Disable all recovery options to prevent unauthorized access

Use the super administrator account for daily administrative tasks

Which of the following is a key component of configuring Workforce Identity Federation?

Creating a service account for each external user

Creating a workforce identity pool and provider

Setting up a VPN to the identity provider

Enabling Google Cloud Directory Sync

A company is migrating from on-premises Active Directory to Google Cloud Identity. They want to ensure that user passwords are not stored in Google Cloud, but users can still authenticate using their AD credentials. Which solution should they implement?

Use GCDS to synchronize password hashes from AD to Cloud Identity.

Configure Workforce Identity Federation to use AD as the identity provider.

Use the Admin SDK to create users with the same passwords as in AD.

Set up SAML SSO with AD FS as the identity provider.

Which of the following is a requirement for configuring SAML-based single sign-on between Google Cloud and a third-party identity provider?

A metadata XML file from the identity provider

A shared secret key between the identity provider and Google Cloud

A dedicated IP address for the Google Cloud SSO endpoint

A VPN connection between the identity provider and Google Cloud

A company uses GCDS to sync users from Active Directory to Cloud Identity. They want to automate the creation of new users and the removal of users who have left the company. They also want to ensure that group memberships are updated automatically. What is the most efficient way to achieve this?

Configure SAML SSO and rely on the identity provider to manage user lifecycle.

Set up Workforce Identity Federation to automatically sync users from AD.

Run GCDS on a schedule and enable the 'Delete users' option.

Use the Admin SDK to write a script that runs on demand and manually triggers user creation and deletion.

Google CloudProfessional Cloud Security Engineer

Domain 1Objective 1

1.1 Managing Cloud Identity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Configuring access domain, which accounts for 25% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

23questions here

5free pages

6concepts

25%of the exam

Questions 6–10

6foundation · easy
What is a recommended practice for managing the super administrator account in Google Cloud Identity?
Select an answer first
7foundation · easy
Which of the following is a key component of configuring Workforce Identity Federation?
Select an answer first
8application · medium
A company is migrating from on-premises Active Directory to Google Cloud Identity. They want to ensure that user passwords are not stored in Google Cloud, but users can still authenticate using their AD credentials. Which solution should they implement?
Select an answer first
9foundation · easy
Which of the following is a requirement for configuring SAML-based single sign-on between Google Cloud and a third-party identity provider?
Select an answer first
10application · medium
A company uses GCDS to sync users from Active Directory to Cloud Identity. They want to automate the creation of new users and the removal of users who have left the company. They also want to ensure that group memberships are updated automatically. What is the most efficient way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.