Google Professional Cloud Security Engineer exam dumps

Google Professional Cloud Security Engineer practice question 97 of 501

Professional Cloud Security Engineer. Expert level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Security Engineer Question 97

Select 2Google Cloud Platform

Your company has implemented a custom web application hosted on Google Cloud that requires single sign-on (SSO) for its users. The company uses an identity provider (IdP) that supports SAML 2.0. You also want to allow third-party applications to access specific user data from this web application using OAuth 2.0. What steps should you take to configure authentication and authorization for the application?

  1. A

    Configure the web application as a SAML service provider and integrate it with the company's IdP for SSO.

  2. B

    Implement an OAuth 2.0 authorization server within the web application to manage access tokens for third-party applications.

  3. C

    Use Google Cloud Identity-Aware Proxy (IAP) to handle both SAML-based SSO and OAuth 2.0 flows automatically.

  4. D

    Create an OAuth 2.0 client ID in Google Cloud and configure it to work with the web application for user authentication.

  5. E

    Enable the Google Cloud SAML SSO API to directly validate tokens issued by the identity provider.

Show answer and explanation

Correct answers: A, B

Explanation

To achieve SSO using SAML, the web application needs to act as a SAML service provider and integrate with the company's IdP. For granting third-party applications access to specific user data, implementing an OAuth 2.0 authorization server within the application is necessary. These configurations ensure secure authentication and authorization flows. Other options like using IAP or creating a Google OAuth client ID are not applicable to this scenario.

  • A. Correct.

    Correct: Configuring the web application as a SAML service provider allows it to authenticate users through the company's IdP, enabling SSO.

  • B. Correct.

    Correct: An OAuth 2.0 authorization server is necessary to issue and validate access tokens for third-party applications requesting user data.

  • C. Incorrect.

    Incorrect: While Identity-Aware Proxy (IAP) can simplify securing web applications, it does not natively handle the combination of SAML SSO and custom OAuth 2.0 flows.

  • D. Incorrect.

    Incorrect: Creating an OAuth 2.0 client ID is specific to Google APIs and is not relevant for setting up custom SAML SSO or OAuth 2.0 for the web application.

  • E. Incorrect.

    Incorrect: The Google Cloud SAML SSO API does not exist for this purpose. SAML token validation is handled between the service provider and the IdP.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Security Engineer practice questions

  1. 98.Your organization wants to allow employees to access a third-party SaaS application using their...
  2. 99.Your organization uses Google Workspace and a third-party identity provider (IdP) to manage user...
  3. 100.Your company wants to enable single sign-on (SSO) for users accessing a custom application hosted...
  4. 101.Your company uses Google Workspace for identity management and you need to configure access to an...
  5. 102.Your organization has mandated 2-step verification for all employees to enhance account security....
Back to the Google Professional Cloud Security Engineer exam dumps