Exam Professional Cloud Security Engineer topic 1 question 275 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 275
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your organization is migrating business critical applications to Google Cloud across multiple projects. You only have the required IAM permission at the Google Cloud organization level. You want to grant project access to support engineers from two partner organizations using their existing identity provider (IdP) credentials. What should you do?

A. Create two single sign-on (SSO) profiles for the internal and partner IdPs by using SSO for Cloud Identity.
B. Create users manually by using the Google Cloud console. Assign the users to groups.
C. Create two workforce identity pools for the partner IdPs.
D. Sync user identities from their existing IdPs to Cloud Identity by using Google Cloud Directory Sync (GCDS).

Show Suggested Answer

Suggested Answer: C 🗳️

by yokoyan at Sept. 6, 2024, 1:41 a.m.

Comments

Submit Cancel

jmaquino

7 months, 1 week ago

Selected Answer: C

Workforce Identity Federation lets you use an external identity provider (IdP) to authenticate and authorize a workforce—a group of users, such as employees, partners, and contractors—using IAM, so that the users can access Google Cloud services. With Workforce Identity Federation you don't need to synchronize user identities from your existing IdP to Google Cloud identities, as you would with Cloud Identity's Google Cloud Directory Sync (GCDS). Workforce Identity Federation extends Google Cloud's identity capabilities to support syncless, attribute-based single sign on.

upvoted 2 times

...