Google Professional Cloud Security Engineer Exam - Topic 1 Question 103 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 103
Topic #: 1

[All Professional Cloud Security Engineer Questions]

An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the ''source of truth'' directory for identities.

Which solution meets the organization's requirements?

AGoogle Cloud Directory Sync (GCDS)

BCloud Identity

CSecurity Assertion Markup Language (SAML)

DPub/Sub

Show Suggested Answer

Suggested Answer: A

With Google Cloud Directory Sync (GCDS), you can synchronize the data in your Google Account with your Microsoft Active Directory or LDAP server. GCDS doesn't migrate any content (such as email messages, calendar events, or files) to your Google Account. You use GCDS to synchronize your Google users, groups, and shared contacts to match the information in your LDAP server.

https://support.google.com/a/answer/106368?hl=en

by Aleisha at Jun 15, 2025, 05:43 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eugene

5 months ago

Wait, I thought SAML was just for authentication, not directory management?

upvoted 0 times

...

Stacey

5 months ago

Totally agree, GCDS seems like the best fit here!

upvoted 0 times

...

Margo

6 months ago

Pub/Sub doesn’t even relate to identity management, right?

upvoted 0 times

...

Shonda

6 months ago

I’m not so sure about that, Cloud Identity could work too.

upvoted 0 times

...

Sue

6 months ago

GCDS is great for syncing with existing directories.

upvoted 0 times

...

Willodean

6 months ago

Pub/Sub seems unrelated to identity management, so I don’t think that’s the right answer, but I can't recall why exactly.

upvoted 0 times

...

Ria

7 months ago

I’m a bit confused about SAML; I know it’s for authentication, but I’m not sure how it fits into the directory service requirement.

upvoted 0 times

...

Deonna

7 months ago

I remember practicing a question about identity management, and I think Cloud Identity might be relevant here, but it doesn't directly sync with existing directories.

upvoted 0 times

...

Mary

7 months ago

I think Google Cloud Directory Sync could be the right choice since it syncs existing directories with GCP, but I'm not entirely sure.

upvoted 0 times

...

Bobbie

7 months ago

I've got this! The answer is clearly Google Cloud Directory Sync (GCDS). It's designed to synchronize on-premises directory services like Active Directory with GCP, which is exactly what the organization needs here.

upvoted 0 times

...

Omer

7 months ago

Okay, let's think this through step-by-step. The organization needs to continue using their existing directory service as the "source of truth" for identities. So we need a GCP solution that can integrate with and sync data from that directory.

upvoted 0 times

...

Lillian

7 months ago

Hmm, I'm a bit unsure about this one. There are a few options presented, and I'll need to carefully read through the requirements to determine which one best meets the organization's needs.

upvoted 0 times

...

Marvel

8 months ago

This looks like a straightforward question about integrating an existing directory service with GCP. I think the key is to identify the right GCP service that can sync with the on-premises directory.

upvoted 0 times

...

Elenore

10 months ago

D) Pub/Sub? Is this a trick question or something? That's just silly.

upvoted 0 times

...

Kati

10 months ago

Hmm, I think I'll go with C) SAML. It's a well-established standard for identity federation. Plus, it sounds fancier than the other options.

upvoted 0 times

...

Earleen

10 months ago

I'm going to have to go with B) Cloud Identity. Can't really go wrong with the official GCP solution for this use case.

upvoted 0 times

Karrie

9 months ago

I think Cloud Identity is the way to go as well. It's designed for this specific purpose.

upvoted 0 times

...

Ocie

9 months ago

Yeah, it's the official solution from GCP so it should work seamlessly.

upvoted 0 times

...

Buffy

10 months ago

I agree, Cloud Identity seems like the best choice here.

upvoted 0 times

...

Izetta

10 months ago

B) Cloud Identity is the way to go. It's specifically designed for integrating directory services with GCP.

upvoted 0 times

...

Jeanice

10 months ago

D) Pub/Sub? Really? That's more for messaging and event-driven architecture, not identity management.

upvoted 0 times

Jacqueline

8 months ago

B) Cloud Identity

upvoted 0 times

...

Loise

8 months ago

A) Google Cloud Directory Sync (GCDS)

upvoted 0 times

...

Kristian

9 months ago

B) Cloud Identity

upvoted 0 times

...

Delfina

9 months ago

A) Google Cloud Directory Sync (GCDS)

upvoted 0 times

...

Onita

11 months ago

I'm not sure about GCDS. I think Cloud Identity could also be a good option as it provides identity and access management for GCP resources.

upvoted 0 times

...

Jose

11 months ago

C) SAML sounds like a good option too. It allows for single sign-on between the directory service and GCP.

upvoted 0 times

Caitlin

10 months ago

A: SAML could also work well for single sign-on between the directory service and GCP.

upvoted 0 times

...

Jospeh

10 months ago

B: I agree, GCDS can sync user identities from the established directory service to GCP.

upvoted 0 times

...

Julene

10 months ago

B) Cloud Identity

upvoted 0 times

...

Lyla

10 months ago

A: I think Google Cloud Directory Sync (GCDS) would be the best solution for this.

upvoted 0 times

...

Charlena

11 months ago

A) Google Cloud Directory Sync (GCDS)

upvoted 0 times

...

Daniel

11 months ago

I agree with Lennie. Using GCDS would ensure that the organization can continue using their established directory service as the 'source of truth' for identities.

upvoted 0 times

...