Google Professional Cloud Security Engineer exam dumps

Google Professional Cloud Security Engineer practice question 12 of 501

Professional Cloud Security Engineer. Expert level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Security Engineer Question 12

Select 3Google Cloud Platform

Your organization wants to use Google Workspace accounts for authentication with a third-party SaaS application. The IT team has decided to configure single sign-on (SSO) using a third-party identity provider (IdP) and synchronize user identities between the organization's on-premises Active Directory and Google Cloud. Which of the following steps are necessary to achieve this setup?

  1. A

    Install and configure Google Cloud Directory Sync (GCDS) to sync user accounts from Active Directory to Google Cloud.

  2. B

    Enable the Identity-Aware Proxy (IAP) on the third-party SaaS application for SSO integration.

  3. C

    Configure the third-party SaaS application to trust the third-party IdP as its SSO provider using SAML.

  4. D

    Set up SAML-based federation between the third-party IdP and Google Workspace.

  5. E

    Create a custom OAuth 2.0 client ID in Google Cloud Console for SSO integration.

Show answer and explanation

Correct answers: A, C, D

Explanation

To implement single sign-on (SSO) with a third-party identity provider (IdP) and synchronize user accounts, you must use Google Cloud Directory Sync (GCDS) to sync identities from your on-premises Active Directory to Google Cloud. Then, you need to configure SAML-based federation between Google Workspace and the third-party IdP to enable SSO. Finally, the third-party SaaS application must be configured to trust the third-party IdP as its SSO provider using SAML.

  • A. Correct.

    Correct. Google Cloud Directory Sync (GCDS) is required to synchronize user accounts from on-premises Active Directory to Google Cloud, ensuring the identities are available for SSO.

  • B. Incorrect.

    Incorrect. Identity-Aware Proxy (IAP) is not relevant to this scenario because it is used to protect web applications and resources hosted on Google Cloud, not for integrating third-party SaaS applications.

  • C. Correct.

    Correct. The third-party SaaS application must be configured to trust the third-party identity provider (IdP) as its SSO provider using SAML, which is a standard protocol for SSO integration.

  • D. Correct.

    Correct. SAML-based federation must be set up between the third-party IdP and Google Workspace to allow users to authenticate using their Google Workspace credentials.

  • E. Incorrect.

    Incorrect. Creating a custom OAuth 2.0 client ID is not required for SAML-based SSO. OAuth 2.0 is a different protocol and is not applicable to this specific setup.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Security Engineer practice questions

  1. 13.Your organization’s Google Cloud environment has a single super administrator account that is used...
  2. 14.A company is using Google Workspace and Google Cloud to manage its resources. The security team...
  3. 15.Your organization uses Google Workspace and has a super administrator account to manage your Google...
  4. 16.Your organization uses Google Workspace with a super administrator account that is primarily used...
  5. 17.Your organization uses Google Workspace and Google Cloud Platform, and you are tasked with securing...
Back to the Google Professional Cloud Security Engineer exam dumps