Practice Test 2 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
Your customer is moving an existing corporate application from an on-premises data center to Google Cloud Platform . The business owner requires minimal user disruption. There are strict security team requirements for storing passwords. What authentication strategy should they use?
A. Use G Suite Password Sync to replicate passwords into Google.
B. Ask users to set their Google password to match their corporate password.
C. Provision users in Google using the Google Cloud Directory Sync tool.
D. Federate authentication via SAML 2.0 to the existing Identity Provider.
Correct Answer D
Feedback
D is Correct answer – Federate authentication via SAML 2.0 to the existing Identity Provider. This meets both “minimal user disruption” and “strict security team requirements for storing passwords”
User’s passwords are stored on-premise, authentication happens on premise, there is no user disruption, on successful authentication, access token is shared to access application or GCP services.
Option A – Use G Suite Password Sync to replicate passwords into Google – This is a violation against “strict security team requirements for storing passwords”
https://support.google.com/a/answer/2611859?hl=en
Option B – Ask users to set their Google password to match their corporate password – this violate “minimal user disruption” and “strict security team requirements for storing passwords”
Option C – Provision users in Google using the Google Cloud Directory Sync tool. With google cloud directory sync, only the SHA-1 and MD5 unsalted passwords gets synced from source. Plus this may break the strict password requirement. Your credential details are now stored at 2 places.
Comments are closed, but trackbacks and pingbacks are open.