Google Cloud Professional Cloud Security Engineer — Question 226

An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well-established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the `source of truth` directory for identities.
Which solution meets the organization's requirements?

Answer options

• A. Google Cloud Directory Sync (GCDS)
• B. Cloud Identity
• C. Security Assertion Markup Language (SAML)
• D. Pub/Sub

Correct answer: A

Explanation

Google Cloud Directory Sync (GCDS) is designed to synchronize user accounts from an existing directory service to GCP, making it suitable for maintaining the 'source of truth' for identities. Cloud Identity and SAML provide identity management solutions but do not directly sync with an existing directory service. Pub/Sub is a messaging service and does not relate to identity management.