1.1 Managing Cloud Identity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–23

1. 21expert · hard

   A company uses GCDS to synchronize users from Active Directory to Cloud Identity. They have a large number of users and want to minimize the impact of a failed synchronization. They also want to ensure that users who are removed from AD are deprovisioned in Cloud Identity. What should they do?

   • ARun GCDS in dry-run mode first, review the changes, and then run it in apply mode with the 'Delete users' option enabled.
   • BRun GCDS in apply mode with the 'Delete users' option enabled, and rely on backups to restore any accidental deletions.
   • CRun GCDS in apply mode without the 'Delete users' option, and manually delete users who have left.
   • DUse the Admin SDK to write a custom script that simulates GCDS and includes a review step.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of Workforce Identity Federation in Google Cloud?

   • ATo provide single sign-on for Google Workspace applications
   • BTo synchronize users from Active Directory into Google Cloud Identity
   • CTo allow external workforce users to access Google Cloud resources using their identity provider credentials
   • DTo manage API keys for external applications
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   An organization wants to automatically create and update user accounts in Google Cloud Identity whenever changes occur in its HR system. Which approach is best suited for this?

   • AUse Cloud Functions to create users whenever a new VM is started
   • BUse a third-party identity provider that supports SCIM provisioning
   • CManually create user accounts in the Google Admin console
   • DConfigure GCDS to sync from the HR system's database directly
   Reveal Solution Discussion Select an answer first