Google Professional Cloud Security Engineer exam dumps

Google Professional Cloud Security Engineer practice question 35 of 501

Professional Cloud Security Engineer. Expert level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Security Engineer Question 35

Select 4Google Cloud Platform

Your organization uses an external identity provider (IdP) to manage workforce identities. You want to configure Google Cloud Workforce Identity Federation to allow your employees to access Google Cloud resources without creating Google accounts. Which of the following steps are necessary to configure Workforce Identity Federation correctly?

  1. A

    Create an identity pool in Google Cloud and configure it with the external IdP.

  2. B

    Set up a Google Cloud service account and grant it the 'Identity Pool Administrator' role.

  3. C

    Create a Workforce Identity Federation provider within the identity pool and configure the OpenID Connect (OIDC) or SAML parameters.

  4. D

    Grant the necessary IAM roles to the identity pool to access Google Cloud resources.

  5. E

    Enable the 'IAM and Admin API' for your Google Cloud project.

Show answer and explanation

Correct answers: A, C, D, E

Explanation

To configure Workforce Identity Federation, you need to create an identity pool, set up a Workforce Identity Federation provider, grant appropriate IAM roles to the identity pool, and enable the 'IAM and Admin API' in your project. Service accounts are not involved in this specific configuration process. These steps ensure proper integration between the external IdP and Google Cloud, allowing seamless access for your workforce.

  • A. Correct.

    Correct. Creating an identity pool is the first step in configuring Workforce Identity Federation, as it represents a group of identities from the external IdP.

  • B. Incorrect.

    Incorrect. While service accounts are used in many Google Cloud operations, they are not directly required for configuring Workforce Identity Federation.

  • C. Correct.

    Correct. A Workforce Identity Federation provider is necessary to define how the external IdP integrates with Google Cloud, including setting up OIDC or SAML parameters.

  • D. Correct.

    Correct. Granting the appropriate IAM roles to the identity pool ensures that users from the external IdP can access the required Google Cloud resources.

  • E. Correct.

    Correct. Enabling the 'IAM and Admin API' is required for configuring and managing Workforce Identity Federation.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Security Engineer practice questions

  1. 36.Your organization uses an external identity provider (IdP) to manage workforce authentication. You...
  2. 37.Your organization has multiple Google Cloud projects, and you are tasked with creating a new...
  3. 38.Your organization uses Google Cloud to run a production environment that involves multiple...
  4. 39.Your organization uses multiple Google Cloud services, and you have been tasked with securing...
  5. 40.Your organization is using Google Cloud and has multiple applications running in separate projects....
Back to the Google Professional Cloud Security Engineer exam dumps