Exam Professional Google Workspace Administrator topic 1 question 32 discussion

Correct answer - C & D https://support.google.com/a/answer/7177266?hl=en#zippy=%2Ccan-i-sync-gcds-from-multiple-ldap-directories GCDS can only sync from a single LDAP directory. If you have multiple LDAP directories, it is recommended that you consolidate your LDAP server data into a single directory. You need to run 2 separate GCDS instances while creating exclusion rules to prevent suspensions/deletions.

set up GCDS

Explanation for the exclusion rule from https://support.google.com/a/answer/7177266 : Why is my Google Workspace user account being suspended after I run GCDS? If a Google Workspace user account is suspended after running GCDS, you will receive an error explaining why this happened. In order to avoid repeating the particular error on any subsequent syncs, you can implement one of the following solutions depending on the cause of the problem: Problem: The user doesn't exist on the LDAP server. Solution: Since the user doesn't exist on the LDAP server, the customer should set a Google user exclusion rule to prevent GCDS from suspending this user in Google Workspace.

C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not suspended. D. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.

Resposta correta - C e D https://support.google.com/a/answer/7177266?hl=en#zippy=%2Ccan-i-sync-gcds-from-multiple-ldap-directories O GCDS só pode sincronizar de um único diretório LDAP. Se você tiver vários diretórios LDAP, é recomendável consolidar os dados do servidor LDAP em um único diretório. Você precisa executar duas instâncias separadas do GCDS ao criar regras de exclusão para evitar suspensões/exclusões.

C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended. D. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.

GCDS can only authenticate a single admin, so the answer A is completely wrong.

C and D are correct, first you need to add the exclusion rules on the first GCDS instance to avoid suspensions of newly provisioned users from the second GCDS instance. Then just setup the second GCDS instance in the acquired organization, it will provision and sync those users and those newly provisioned users wont be suspended by the first instance :)