Google Cloud Professional Cloud Security Engineer — Question 13

A customer's data science group wants to use Google Cloud Platform (GCP) for their analytics workloads. Company policy dictates that all data must be company-owned and all user authentications must go through their own Security Assertion Markup Language (SAML) 2.0 Identity Provider (IdP). The
Infrastructure Operations Systems Engineer was trying to set up Cloud Identity for the customer and realized that their domain was already being used by G Suite.
How should you best advise the Systems Engineer to proceed with the least disruption?

Answer options

• A. Contact Google Support and initiate the Domain Contestation Process to use the domain name in your new Cloud Identity domain.
• B. Register a new domain name, and use that for the new Cloud Identity domain.
• C. Ask Google to provision the data science manager's account as a Super Administrator in the existing domain.
• D. Ask customer's management to discover any other uses of Google managed services, and work with the existing Super Administrator.

Correct answer: D

Explanation

The correct answer is D because it ensures that the company understands all existing uses of Google services and can make informed decisions without disrupting current operations. Option A is not advisable as it may lead to complications in the ownership of the domain. Option B would create unnecessary overhead by requiring a new domain. Option C does not address the overall management of the domain and may not align with company policies.