Answer-first summary for fast verification
Answer: Use Google Cloud Directory Sync (GCDS) to synchronize users from Active Directory to Cloud Identity.
**D is correct** because Google Cloud Directory Sync (GCDS) provides a straightforward and efficient method to synchronize users, groups, and other data from an Active Directory or LDAP service to the Google Cloud domain directory. This ensures centralized management of all user accounts through Active Directory, regardless of the employees' locations. **A is incorrect** as manually handling user data through CSV files is prone to errors and lacks the efficiency needed for a large, global workforce. It also doesn't support real-time synchronization. **B is incorrect** because it doesn't offer centralized control. Individual account creation leads to inconsistencies in access and permissions management across the organization. **C is incorrect** due to the unnecessary complexity and development effort required when a ready-made solution like GCDS is available. Custom scripts would demand significant coding expertise and maintenance. For more information, refer to: - [Google Cloud Directory Sync](https://tools.google.com/dlpage/dirsync/) - [Federating GCP with Active Directory](https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction)
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your company has thousands of employees working globally, all with Active Directory accounts. The goal is to manage all Google and Google Cloud Platform accounts through Active Directory. What is the best approach to achieve this?
A
Manually export and import user data via a CSV file in the Google Admin Console.
B
Encourage each employee to create their own Google account using their company email.
C
Develop a custom script with Cloud Identity APIs to sync users to Cloud Identity.
D
Use Google Cloud Directory Sync (GCDS) to synchronize users from Active Directory to Cloud Identity.
No comments yet.