Google Exam Professional Cloud Security Engineer Topic 4 Question 76 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 76
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You are the Security Admin in your company. You want to synchronize all security groups that have an email address from your LDAP directory in Cloud IAM.

What should you do?

AConfigure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.

BConfigure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate bidirectional sync.

CUse a management tool to sync the subset based on the email address attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

DUse a management tool to sync the subset based on group object class attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

Show Suggested Answer

Suggested Answer: A

by Jonelle at Apr 24, 2024, 03:24 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tashia

1 months ago

If I had a nickel for every time I had to sync security groups from an LDAP directory, I'd have enough to buy a very secure coffee mug.

upvoted 0 times

...

Crista

1 months ago

I'm just hoping the LDAP directory doesn't have any email addresses like 'security_admin@company.com'. That would make this whole process a bit too meta for my liking.

upvoted 0 times

...

Eric

1 months ago

D mentions using the group object class attribute, but I don't want to make assumptions about my LDAP directory structure. A is the way to go, no doubt.

upvoted 0 times

Brett

14 days ago

B) I think B might be better because it allows for bidirectional sync, giving you more control over the synchronization process.

upvoted 0 times

...

Ty

18 days ago

A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.

upvoted 0 times

...

2 months ago

I'm not sure why I would want bidirectional sync for this scenario. Option B seems overkill. I'd go with A.

upvoted 0 times

Rosalind

6 days ago

I'm not sure why I would want bidirectional sync for this scenario. Option B seems overkill. I'd go with A.

upvoted 0 times

...

Michel

7 days ago

B) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate bidirectional sync.

upvoted 0 times

...

Jacqueline

15 days ago

A) Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have ''user email address'' as the attribute to facilitate one-way sync.

upvoted 0 times

...

3 months ago

I think the answer is A. We should configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have 'user email address' as the attribute for one-way sync.

upvoted 0 times

...