MENU
You are the Security Admin in your company. You want to synchronize all security groups that have an email address from your LDAP directory in Cloud IAM.
What should you do?
Suggested Answer: A
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
RU
Ruth
11 months ago
Wait, groups in Google automatically get IAM roles? That's new to me!
DU
Dudley
11 months ago
D seems like an unnecessary step, honestly.
CL
Clarinda
11 months ago
C sounds a bit complicated, not sure about that.
CO
Cornell
11 months ago
I think B is better for flexibility.
GI
Gilbert
12 months ago
A is the way to go for one-way sync!
EL
Ellsworth
12 months ago
I recall that groups created in Google automatically get IAM roles, but I can't remember if that applies to all options here.
DA
Dawne
1 year ago
I’m a bit confused about whether to focus on the email address or the group object class. I feel like both attributes were mentioned in our study materials.
LE
Lea
1 year ago
I think option A sounds familiar because we discussed using LDAP search rules with email addresses in our practice questions.
LO
Lonna
1 year ago
I remember something about Google Cloud Directory Sync, but I'm not sure if it's one-way or bidirectional for syncing security groups.
ST
Stefanie
1 year ago
I'm leaning towards option A, but I want to double-check the details on the LDAP search rules to make sure I'm setting that up correctly. Don't want to miss anything important there.
CA
Carrol
1 year ago
Option C looks good to me. Using a management tool to sync the subset based on email address and then creating the group in the Google domain seems like a clean way to handle this.
KR
Kris
1 year ago
Hmm, I'm a bit confused on the difference between one-way and bidirectional sync. I'll need to review the details on those options more carefully before deciding.
RE
Renay
1 year ago
This seems like a straightforward question about syncing security groups from LDAP to Cloud IAM. I think option A is the best approach since it's a one-way sync and we just need to match the email address attribute.
FR
Francene
1 year ago
Hmm, I'm a bit confused about the different options here. I'll need to think through the key requirements of a DWDM system to determine the right answer.
JO
Josefa
1 year ago
Hmm, I'm a bit confused about the FTP server details. Do I need to log in to the FTP server first before downloading the package?
BR
Bronwyn
1 year ago
This seems like a straightforward question about building trust with customers. I'll focus on the key concepts of transparency and customer control.
KR
Kristofer
1 year ago
This looks straightforward. I'll carefully read through the options and select the one that best matches the question.
WH
Whitley
1 year ago
Okay, let's see here. Noah's credit report was used in the hiring process, and he's worried about the security of that information. Based on the details provided, I think the Disposal Rule under FACTA is the best answer. That rule requires companies to properly dispose of consumer information to prevent unauthorized access.
TA
Tashia
1 year ago
If I had a nickel for every time I had to sync security groups from an LDAP directory, I'd have enough to buy a very secure coffee mug.
CR
Crista
1 year ago
I'm just hoping the LDAP directory doesn't have any email addresses like 'security_admin@company.com'. That would make this whole process a bit too meta for my liking.
ER
Eric
1 year ago
D mentions using the group object class attribute, but I don't want to make assumptions about my LDAP directory structure. A is the way to go, no doubt.
ME
Melinda
1 year ago
A) I see your point, but I prefer the simplicity of A. It's important to avoid making assumptions about the LDAP directory structure.
BR
Brett
1 year ago
B) I think B might be better because it allows for bidirectional sync, giving you more control over the synchronization process.
TY
Ty
1 year ago
A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.
SH
Shayne
1 year ago
Option C looks like it could work, but I don't want to deal with the hassle of a management tool. I'll stick with the Google Cloud Directory Sync in A.
MI
Mitsue
1 year ago
Let's go with option A then, it seems like the most efficient solution.
EL
Elin
1 year ago
I agree, using Google Cloud Directory Sync will make it easier for us.
DA
Davida
1 year ago
Option A sounds like the best choice for you.
CH
Chuck
1 year ago
I'm not sure why I would want bidirectional sync for this scenario. Option B seems overkill. I'd go with A.
RO
Rosalind
1 year ago
I'm not sure why I would want bidirectional sync for this scenario. Option B seems overkill. I'd go with A.
MI
Michel
1 year ago
B) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate bidirectional sync.
JA
Jacqueline
1 year ago
A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.
NO
Nobuko
1 year ago
Option A seems like the most straightforward approach to synchronize the security groups with email addresses from the LDAP directory. One-way sync should be sufficient for this use case.
TO
Tommy
1 year ago
C) Using a management tool to sync based on email address attribute and creating a group in the Google domain seems like a good solution.
CA
Carmen
1 year ago
A) Exactly, one-way sync will ensure that the security groups are synchronized without any conflicts.
JO
Johnetta
1 year ago
B) I think one-way sync is enough for this scenario. Bidirectional sync might cause conflicts.
BR
Brittni
1 year ago
A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.
TI
Titus
2 years ago
I think option C is the best choice. Using a management tool to sync based on email address attribute and creating a group in the Google domain will automatically assign Google Cloud IAM roles.
AR
Arthur
2 years ago
I disagree, I believe the answer is B. We need to configure Google Cloud Directory Sync for bidirectional sync to ensure all security groups with email addresses are synchronized.
DE
Devora
2 years ago
I think the answer is A. We should configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have 'user email address' as the attribute for one-way sync.