Google Associate Cloud Engineer Question 19
Single answerGoogle Cloud PlatformYou are tasked with setting up user access management for your company's new project on Google Cloud Platform. The company uses Google Workspace, and you need to ensure that the user groups are automatically synchronized with Google Cloud Identity. Which approach should you take to achieve this?
- A
Use Google Cloud Directory Sync to synchronize user groups.
- B
Manually import user groups into Google Cloud Identity.
- C
Use the Identity and Access Management (IAM) API to automate the synchronization process.
- D
Enable single sign-on (SSO) to integrate with Google Workspace.
Show answer and explanation
Correct answer: A
Explanation
Google Cloud Directory Sync is the recommended tool for synchronizing user groups between on-premises directories and Google Cloud Identity or Google Workspace. It ensures that user data is consistently updated and maintained across platforms without manual intervention, aligning with the requirements for automated synchronization.
- A. Correct.
Google Cloud Directory Sync (GCDS) is a tool specifically designed to synchronize user accounts, groups, and shared contacts from your on-premises Active Directory or LDAP server to Google Cloud Identity and Google Workspace.
- B. Incorrect.
Manually importing user groups is not a sustainable or automated solution, especially for large organizations.
- C. Incorrect.
While the IAM API can manage resources and permissions, it is not designed to handle synchronization with external identity sources like Google Workspace.
- D. Incorrect.
Single sign-on (SSO) facilitates user authentication but does not handle the synchronization of user groups between systems.