ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam
Go to Exam

Exam Professional Cloud Security Engineer topic 1 question 68 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 68
Topic #: 1
[All Professional Cloud Security Engineer Questions]

A customer terminates an engineer and needs to make sure the engineer's Google account is automatically deprovisioned.
What should the customer do?

  • A. Use the Cloud SDK with their directory service to remove their IAM permissions in Cloud Identity.
  • B. Use the Cloud SDK with their directory service to provision and deprovision users from Cloud Identity.
  • C. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity.
  • D. Configure Cloud Directory Sync with their directory service to remove their IAM permissions in Cloud Identity.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by MohitA at Sept. 2, 2020, 10:10 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 4 years ago
Ans - C
upvoted 7 times
...
MohitA
Highly Voted 4 years, 2 months ago
C is the Answer
upvoted 7 times
ownez
4 years, 1 month ago
Agree with C. "https://cloud.google.com/identity/solutions/automate-user-provisioning#cloud_identity_automated_provisioning" "Cloud Identity has a catalog of automated provisioning connectors, which act as a bridge between Cloud Identity and third-party cloud apps."
upvoted 11 times
AzureDP900
2 years ago
Agree with C, there is no need of cloud SDK.
upvoted 2 times
AzureDP900
2 years ago
C. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity.
upvoted 1 times
...
...
mynk29
2 years, 8 months ago
This option is for Cloud identity to third party app- you configure directory sync between AD and cloud identity.
upvoted 2 times
...
...
...
pradoUA
Most Recent 1 year, 1 month ago
Selected Answer: C
C is correct
upvoted 2 times
...
AzureDP900
2 years ago
C. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity.
upvoted 1 times
...
AwesomeGCP
2 years ago
Selected Answer: C
C. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity.
upvoted 2 times
...
piyush_1982
2 years, 3 months ago
Selected Answer: C
Definitely C
upvoted 2 times
...
mynk29
2 years, 8 months ago
I don't think C is right answer. You configure Directory Sync to Sync from AD to cloud identity not the other way round. Once a user is terminated- its account should be disabled on Directory and cloud identity will pick up via IAM. D looks more correct to me.
upvoted 2 times
AkbarM
2 years, 1 month ago
I also support D. The question may be provision and deprovision users. but technically it is to remove their IAM permissions in Cloud Identity. There is nothing like provision / deprovision user from cloud identity.
upvoted 1 times
rohan0411
10 months, 1 week ago
C is correct, because You cannot control IAM from Cloud Identity. Cloud identity only manages users and groups. It cannot remove IAM permissions through Cloud Identity.
upvoted 1 times
...
...
...
DebasishLowes
3 years, 7 months ago
Ans is C
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago