Google Exam Professional Cloud Security Engineer Topic 4 Question 76 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 76
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You are the Security Admin in your company. You want to synchronize all security groups that have an email address from your LDAP directory in Cloud IAM.

What should you do?

AConfigure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.

BConfigure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate bidirectional sync.

CUse a management tool to sync the subset based on the email address attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

DUse a management tool to sync the subset based on group object class attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

Show Suggested Answer

Suggested Answer: A

by Jonelle at Apr 24, 2024, 03:24 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tashia

19 days ago

If I had a nickel for every time I had to sync security groups from an LDAP directory, I'd have enough to buy a very secure coffee mug.

upvoted 0 times

...

Crista

24 days ago

I'm just hoping the LDAP directory doesn't have any email addresses like 'security_admin@company.com'. That would make this whole process a bit too meta for my liking.

upvoted 0 times

...

Eric

25 days ago

D mentions using the group object class attribute, but I don't want to make assumptions about my LDAP directory structure. A is the way to go, no doubt.

upvoted 0 times

Ty

18 hours ago

A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.

upvoted 0 times

...

2 months ago

I think the answer is A. We should configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have 'user email address' as the attribute for one-way sync.

upvoted 0 times

...