Answer-first summary for fast verification
Answer: Use Google Cloud Directory Sync to synchronize your local identity management system to Cloud Identity., Use the Transfer Tool for Unmanaged Users (TTUU) to find users with conflicting accounts and ask them to transfer their personal Google accounts.
The question requires two actions: (1) integrating with a third-party identity provider for single sign-on, and (2) converting existing unmanaged users with corporate email addresses to managed accounts following Google's recommended practices. Option A (Google Cloud Directory Sync) addresses the first requirement by synchronizing the local identity management system to Cloud Identity, enabling SSO integration. Option D (Transfer Tool for Unmanaged Users) directly addresses the second requirement by identifying conflicting accounts and facilitating their transfer to managed accounts, which aligns with Google's documented best practices. The community discussion strongly supports A and D, with the highest upvotes and references to official Google documentation. Option B is reactive and doesn't resolve the core issue. Option C violates corporate policy by forcing changes to personal accounts and doesn't leverage recommended tools. Option E is informal and not a scalable or secure practice.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
You need to provide corporate user accounts in Google Cloud for your developers and operational staff who require direct access to GCP resources. Corporate policy mandates that user identities are maintained in a third-party identity provider with single sign-on. You discover that many users have personal Google accounts using their corporate email addresses, and you must follow Google's recommended practices to convert these existing unmanaged users to managed accounts.
Which two actions should you take? (Choose two.)
A
Use Google Cloud Directory Sync to synchronize your local identity management system to Cloud Identity.
B
Use the Google Admin console to view which managed users are using a personal account for their recovery email.
C
Add users to your managed Google account and force users to change the email addresses associated with their personal accounts.
D
Use the Transfer Tool for Unmanaged Users (TTUU) to find users with conflicting accounts and ask them to transfer their personal Google accounts.
E
Send an email to all of your employees and ask those users with corporate email addresses for personal Google accounts to delete the personal accounts immediately.