Google Cloud Associate Cloud Engineer — Question 99

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

Answer options

• A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
• B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
• C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
• D. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.

Correct answer: A

Explanation

The correct answer is A because Google Cloud Directory Sync (GCDS) allows for the synchronization of users from Active Directory into Cloud Identity, providing the necessary control over accounts. Options B and C require additional manual effort and do not offer the same level of integration and automation. Option D does not provide centralized control over user accounts, which is essential for managing access in a corporate environment.