Google Professional Cloud Security Engineer exam dumps

Google Professional Cloud Security Engineer practice question 9 of 501

Professional Cloud Security Engineer. Expert level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Security Engineer Question 9

Select 3Google Cloud Platform

Your organization is using Google Workspace and wants to integrate it with a third-party identity provider (IdP) to enable Single Sign-On (SSO) for users. Additionally, they need to synchronize their on-premises Active Directory (AD) with Google Cloud Directory. Which of the following steps should you take to achieve this integration?

  1. A

    Install and configure Google Cloud Directory Sync (GCDS) to synchronize users and groups from Active Directory to Google Cloud.

  2. B

    Enable SSO in the Google Admin Console and configure the third-party IdP as the SSO provider.

  3. C

    Generate a key pair and upload the public key to the third-party IdP to establish trust.

  4. D

    Disable user synchronization in Google Cloud Directory Sync to avoid conflicts with SSO.

  5. E

    Download the SAML metadata file from the third-party IdP and upload it to the Google Admin Console.

Show answer and explanation

Correct answers: A, B, E

Explanation

To integrate Google Workspace with a third-party IdP for SSO and synchronize on-premises Active Directory, you need to configure Google Cloud Directory Sync (GCDS) for user and group synchronization. Additionally, SSO must be enabled in the Google Admin Console, and the third-party IdP's SAML metadata file must be uploaded to establish the trust relationship. Key pairs are not required for this setup.

  • A. Correct.

    Correct: Google Cloud Directory Sync is required to synchronize user and group information from on-premises Active Directory to Google Cloud.

  • B. Correct.

    Correct: Enabling SSO in the Google Admin Console and configuring the third-party IdP as the SSO provider is a key step in implementing SSO.

  • C. Incorrect.

    Incorrect: Key pairs are not required for SSO integration when using a third-party IdP with Google Workspace. Instead, SAML metadata files are used to establish trust.

  • D. Incorrect.

    Incorrect: Disabling user synchronization in GCDS would prevent users and groups from being synced to Google Cloud, which is not recommended for this scenario.

  • E. Correct.

    Correct: The SAML metadata file is required to configure the trust relationship between Google Workspace and the third-party IdP.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Security Engineer practice questions

  1. 10.Your company is using an on-premises Active Directory to manage users and groups. You are tasked...
  2. 11.Your organization uses a third-party identity provider (IdP) for user authentication and...
  3. 12.Your organization wants to use Google Workspace accounts for authentication with a third-party SaaS...
  4. 13.Your organization’s Google Cloud environment has a single super administrator account that is used...
  5. 14.A company is using Google Workspace and Google Cloud to manage its resources. The security team...
Back to the Google Professional Cloud Security Engineer exam dumps