Google Professional Cloud Security Engineer exam dumps

Google Professional Cloud Security Engineer practice question 23 of 501

Professional Cloud Security Engineer. Expert level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Security Engineer Question 23

Select 3Google Cloud Platform

Your organization uses Google Cloud Identity for user management and wants to automate the user lifecycle management process, including user provisioning and deprovisioning, while ensuring compliance with organizational security policies. Which of the following solutions should you implement to achieve this?

  1. A

    Integrate Google Cloud Identity with an external Identity Provider (IdP) that supports SCIM for automated user provisioning and deprovisioning.

  2. B

    Use Google Cloud Directory Sync (GCDS) to synchronize user accounts from your on-premises directory to Google Cloud Identity.

  3. C

    Manually create and delete user accounts in Google Cloud Identity based on HR-provided user data.

  4. D

    Leverage Google Workspace Admin SDK Directory API to programmatically manage users and groups.

  5. E

    Use Cloud Logging to monitor user account changes and manually update the accounts as needed.

Show answer and explanation

Correct answers: A, B, D

Explanation

Automating the user lifecycle management process requires tools and integrations that support the provisioning, synchronization, and deprovisioning of user accounts. SCIM integration and GCDS streamline these processes by synchronizing and automating account management. Additionally, advanced programmatic tools like the Google Workspace Admin SDK Directory API allow further customization and automation. Manual processes and monitoring tools like Cloud Logging are insufficient for true automation.

  • A. Correct.

    This is correct because SCIM (System for Cross-domain Identity Management) enables automated provisioning and deprovisioning of users, which is essential for lifecycle management. Integrating Google Cloud Identity with an external IdP that supports SCIM helps streamline this process.

  • B. Correct.

    This is correct because Google Cloud Directory Sync (GCDS) allows synchronization of user accounts from an on-premises directory, automating a critical part of user lifecycle management for hybrid environments.

  • C. Incorrect.

    This is incorrect because manual account management is error-prone, time-consuming, and does not align with the goal of automation.

  • D. Correct.

    This is correct because the Google Workspace Admin SDK Directory API enables programmatic management of users and groups, which can be used to implement automation for user lifecycle management processes.

  • E. Incorrect.

    This is incorrect because while Cloud Logging can monitor user account changes, it does not provide automation for provisioning or deprovisioning.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Security Engineer practice questions

  1. 24.You are a security engineer tasked with automating the user lifecycle management process for your...
  2. 25.You are tasked with programmatically managing user accounts and groups in a Google Cloud...
  3. 26.An organization wants to programmatically manage user accounts and groups in their Google Cloud...
  4. 27.You are a security engineer at a company using Google Cloud. You are tasked with creating a script...
  5. 28.Your organization uses Google Cloud Identity and Access Management (IAM) to manage permissions. You...
Back to the Google Professional Cloud Security Engineer exam dumps