Exam Professional Cloud Architect All Questions

View all questions & answers for the Professional Cloud Architect exam

Exam Professional Cloud Architect topic 8 question 3 discussion

Actual exam question from Google's Professional Cloud Architect

Question #: 3
Topic #: 8

[All Professional Cloud Architect Questions]

Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data.
What should you do?

A. Build or leverage an OAuth-compatible access control system
B. Build SAML 2.0 SSO compatibility into your authentication system
C. Restrict data access based on the source IP address of the partner systems
D. Create secondary credentials for each dealer that can be given to the trusted third party

Show Suggested Answer

Suggested Answer: A 🗳️

by Ramrao14 at Nov. 30, 2019, 10:01 p.m.

Comments

Submit Cancel

ravisar

Highly Voted 1 year, 5 months ago

SAML is an authentication system. OAuth is an authorization system. Both can be used with SSO (Single sign on). SAML is for users and OAuth is more for applications. Answer A

upvoted 46 times

huyhoang8344

8 months ago

SAML can do both authentication and authorization If I am not mistaken But agree A should be the answer

upvoted 2 times

...

AD2AD4

Highly Voted 2 years, 11 months ago

Final Decision to go with Option A. Refer - https://cloud.google.com/docs/authentication Good Read - https://cloud.google.com/blog/products/identity-security/identity-and-authentication-the-google-cloud-way

upvoted 26 times

...

megumin

Most Recent 5 months, 4 weeks ago

Selected Answer: A

ok for A

upvoted 1 times

...

Nirca

7 months, 2 weeks ago

Selected Answer: A

Delegate application authorization with OAuth2

upvoted 1 times

...

AzureDP900

10 months ago

OAuth Authorization is right. A is right!

upvoted 2 times

...

pakilodi

1 year, 4 months ago

Selected Answer: A

A is correct

upvoted 2 times

...

joe2211

1 year, 5 months ago

Selected Answer: A

vote A

upvoted 2 times

...

MaxNRG

1 year, 6 months ago

A – O-Auth 2 access to system (clients would use APIs) https://cloud.google.com/docs/authentication/end-user B – SAML 2.0 is redundant, not in requirements.

upvoted 1 times

...