Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 4

Question

Your team wants to centrally manage GCP IAM permissions from their on-premises Active Directory Service. Your team wants to manage permissions by AD group membership. What should your team do to meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Set up Cloud Directory Sync to sync groups, and set IAM permissions on the groups. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 4