When configuring Google Cloud Directory Sync (GCDS) to synchronize from Active Directory, which of the following is a typical configuration step?

Enabling the Cloud Identity API in the Google Cloud console

Deploying GCDS as a container in Google Kubernetes Engine

Specifying the LDAP server address and base DN for the directory

Creating a service account with Domain-Wide Delegation in the Google Cloud console

To call the Admin SDK Directory API to create a user, what type of authorization is typically required?

Basic authentication with username and password

Service account with Domain-Wide Delegation

OAuth 2.0 with appropriate scopes

Which of the following is a way to monitor activity performed by the super administrator account?

Reviewing the Admin audit log in the Google Admin console

Checking the Cloud Logging logs for the Compute Engine instances

Using Cloud Monitoring to track CPU usage of the admin console

Enabling VPC flow logs in the Google Cloud console

An organization wants to automate the creation of Google Cloud Identity users and groups using scripts. They need to integrate this with their existing HR system. Which approach should they use?

Use the Admin SDK Directory API to create users and groups programmatically.

Use the Cloud Identity API to create users and groups, but only for workforce identity federation.

Use the IAM API to create users and groups.

Use the Cloud Resource Manager API to create users and groups.

A security team wants to ensure that the super administrator account for their Google Cloud organization is not compromised. They want to enforce strong authentication and monitor for suspicious activity. Which combination of actions should they take?

Disable two-step verification to avoid lockouts and rely on IP allowlisting.

Create a service account with super admin privileges and use it for administrative tasks.

Enforce two-step verification for the super admin and review the Admin audit log regularly.

Use a shared super admin account with a complex password and change it every 90 days.

Google CloudProfessional Cloud Security Engineer

Domain 1Objective 1

1.1 Managing Cloud Identity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Part of the Configuring access domain, which accounts for 25% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

23questions here

5free pages

6concepts

25%of the exam

Questions 16–20

16foundation · easy
When configuring Google Cloud Directory Sync (GCDS) to synchronize from Active Directory, which of the following is a typical configuration step?
Select an answer first
17foundation · easy
To call the Admin SDK Directory API to create a user, what type of authorization is typically required?
Select an answer first
18foundation · easy
Which of the following is a way to monitor activity performed by the super administrator account?
Select an answer first
19application · medium
An organization wants to automate the creation of Google Cloud Identity users and groups using scripts. They need to integrate this with their existing HR system. Which approach should they use?
Select an answer first
20application · medium
A security team wants to ensure that the super administrator account for their Google Cloud organization is not compromised. They want to enforce strong authentication and monitor for suspicious activity. Which combination of actions should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.