Google Professional Cloud Developer Question 116
Select 3Google Cloud PlatformYou are developing a multi-platform web and mobile application that requires authentication for end users. The system should support multiple authentication providers such as Google, Facebook, and Email/Password. Additionally, you need to ensure that users are automatically signed out after 15 minutes of inactivity. Which combination of steps should you implement using Google Cloud's Identity Platform to meet these requirements?
- A
Enable and configure Google, Facebook, and Email/Password as identity providers in the Identity Platform console.
- B
Set session expiration policies in the Identity Platform settings for a 15-minute inactivity timeout.
- C
Implement OAuth2.0 flow manually for Google and Facebook authentication to integrate them with the application.
- D
Use the Firebase Authentication SDK to handle user authentication and session management.
- E
Enable custom claims in Identity Platform to manage session timeouts.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements, you should leverage Identity Platform's built-in capabilities to enable and configure multiple identity providers (e.g., Google, Facebook, Email/Password), set session expiration policies for inactivity, and use the Firebase Authentication SDK to handle authentication flows and session management. These steps ensure robust end-user account management and authentication without unnecessary manual implementation.
- A. Correct.
This is correct. Identity Platform allows you to enable and configure multiple identity providers, such as Google, Facebook, and Email/Password, directly in the console.
- B. Correct.
This is correct. Session expiration policies, including inactivity timeouts, can be configured in Identity Platform to automatically sign users out after a defined period.
- C. Incorrect.
This is incorrect. Identity Platform and Firebase Authentication SDK already handle the necessary OAuth2.0 flows for supported providers, so manual implementation is unnecessary.
- D. Correct.
This is correct. The Firebase Authentication SDK simplifies authentication integration with Identity Platform and provides mechanisms for handling user sessions.
- E. Incorrect.
This is incorrect. Custom claims are used for role-based access control or custom metadata, not session timeout management.