Answer-first summary for fast verification
Answer: Reconcile accounts that exist in Cloud Identity but not in the third-party IdP., Use the transfer tool to invite those corporate employees to transfer their unmanaged consumer accounts to the corporate domain.
The question requires ensuring organizational control over unmanaged consumer accounts created with corporate email addresses. Option B (Reconcile accounts that exist in Cloud Identity but not in the third-party IdP) is correct because it aligns accounts between systems, identifying orphaned accounts that need management. Option E (Use the transfer tool to invite employees to transfer their unmanaged consumer accounts to the corporate domain) is correct as it is Google's recommended method to convert unmanaged accounts into managed ones under organizational control, enabling configuration, security, and lifecycle management. The community discussion strongly supports B and E, with high upvotes and references to Google documentation. Other options are less suitable: A is impractical and may disrupt user access; C could cause data loss by evicting accounts before sync; and D (GCDS) is for syncing managed accounts, not converting unmanaged ones.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
You are synchronizing identities to Cloud Identity from a third-party identity provider. You found that some employees used their corporate email addresses to create consumer accounts for accessing Google services. You need to ensure your organization has control over the configuration, security, and lifecycle of these accounts.
What should you do? (Select two.)
A
Mandate that those corporate employees delete their unmanaged consumer accounts.
B
Reconcile accounts that exist in Cloud Identity but not in the third-party IdP.
C
Evict the unmanaged consumer accounts in the third-party IdP before you sync identities.
D
Use Google Cloud Directory Sync (GCDS) to migrate the unmanaged consumer accounts' emails as user aliases.
E
Use the transfer tool to invite those corporate employees to transfer their unmanaged consumer accounts to the corporate domain.
No comments yet.