Google Cloud Professional Cloud Security Engineer — Question 244

You need to provide a corporate user account in Google Cloud for each of your developers and operational staff who need direct access to GCP resources.
Corporate policy requires you to maintain the user identity in a third-party identity management provider and leverage single sign-on. You learn that a significant number of users are using their corporate domain email addresses for personal Google accounts, and you need to follow Google recommended practices to convert existing unmanaged users to managed accounts.
Which two actions should you take? (Choose two.)

Answer options

• A. Use Google Cloud Directory Sync to synchronize your local identity management system to Cloud Identity.
• B. Use the Google Admin console to view which managed users are using a personal account for their recovery email.
• C. Add users to your managed Google account and force users to change the email addresses associated with their personal accounts.
• D. Use the Transfer Tool for Unmanaged Users (TTUU) to find users with conflicting accounts and ask them to transfer their personal Google accounts.
• E. Send an email to all of your employees and ask those users with corporate email addresses for personal Google accounts to delete the personal accounts immediately.

Correct answer: A, D

Explanation

The correct actions are A and D. Option A enables synchronization of the local identity management system with Cloud Identity, ensuring corporate user accounts are managed properly. Option D allows you to identify and request users to transfer their personal accounts, aligning them with corporate policy. Options B, C, and E do not effectively convert unmanaged users to managed accounts and can lead to compliance issues.