Exam Professional Cloud Security Engineer topic 1 question 13 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 13
Topic #: 1

[All Professional Cloud Security Engineer Questions]

A customer's data science group wants to use Google Cloud Platform (GCP) for their analytics workloads. Company policy dictates that all data must be company-owned and all user authentications must go through their own Security Assertion Markup Language (SAML) 2.0 Identity Provider (IdP). The
Infrastructure Operations Systems Engineer was trying to set up Cloud Identity for the customer and realized that their domain was already being used by G Suite.
How should you best advise the Systems Engineer to proceed with the least disruption?

A. Contact Google Support and initiate the Domain Contestation Process to use the domain name in your new Cloud Identity domain.
B. Register a new domain name, and use that for the new Cloud Identity domain.
C. Ask Google to provision the data science manager's account as a Super Administrator in the existing domain.
D. Ask customer's management to discover any other uses of Google managed services, and work with the existing Super Administrator.

Show Suggested Answer

Suggested Answer: D 🗳️

by rafaelc at March 14, 2020, 8:28 a.m.

Comments

Submit Cancel

syllox

Highly Voted 4 years, 3 months ago

Ans :D

upvoted 12 times

...

TNT87

Highly Voted 4 years, 9 months ago

The answer is A "This domain is already in use" If you receive this message when trying to sign up for a Google service, it might be because: You recently removed this domain from another managed Google account. It can take 24 hours (or 7 days if you purchased your account from a reseller) before you can use the domain with a new account. You or someone in your organization already created a managed Google account with your domain. Try resetting the administrator password and we’ll send an email to the secondary email you provided when you signed up, telling you how to access the account. You’re using the domain with another managed Google account that you own. If so, remove the domain from the other account. Contact us If none of these applies, the previous owner of your domain might have signed up for a Google service. Fill out this form and the Support team will get back to you within 48 hours.

upvoted 9 times

lollo1234

4 years, 4 months ago

Answer is D - there is no evidence that the account is lost, or similar. In a large corp it is very possible that someone (the IT org) has registered with google, and the Data science Department simply haven't been given access to it yet.

upvoted 20 times

2 years, 6 months ago

Answer : A Here's why --> https://support.google.com/a/answer/6286258?hl=en When the form is launched > opens a google ticket. Therefore, A is the appropriate answer to this Q

upvoted 2 times

...

3 years, 5 months ago

its A , https://support.google.com/a/answer/6286258?hl=en#:~:text=If%20you%20get%20an%20alert,that%20you%20don't%20manage.

upvoted 1 times

...

idtroo

4 years, 4 months ago

Answer is D. https://support.google.com/cloudidentity/answer/7389973 If you're an existing Google Workspace customer Follow these steps to sign up for Cloud Identity Premium: Using your administrator account, sign in to the Google Admin console at admin.google.com. From the Admin console Home page, at the top left, click Menu ""and thenBillingand thenGet more services. Click Cloud Identity. Next to Cloud Identity Premium, click Start Free Trial. Follow the guided instructions.

upvoted 7 times

...

TNT87

4 years, 5 months ago

Sorry Ans is D

upvoted 5 times

...

CloudTrip

4 years, 6 months ago

A, B are definitely not the answer for this. Most of you are aligned with D but can somebody explain what is wrong with C ? Their domain is already used by the G-Suite. It will be least disruptive also.

upvoted 1 times

[Removed]

2 years, 1 month ago

Also, you would only go to Google to override if there is no admin at your company.

upvoted 1 times

...

lollo1234

4 years, 4 months ago

Principle of least privilege - should the 'data science manager' be a superadmin?? Probably not. Hence D, work with the existing admin - we assume that they were chosen sensibly.

upvoted 5 times

...