Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

The correct answer is B. Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities. https://cloud.google.com/iap/docs/concepts-overview If you need to create Google Accounts for your existing users, you can use Google Cloud Directory Sync to synchronize with your Active Directory or LDAP server.

Submitted by anna_se· Mar 30, 2026Designing for security and compliance

Question

Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

Options

AUse the Admin Directory API to authenticate against the Active Directory domain controller.
BUse Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities
CUse Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain
DUse Compute Engine to create an Active Directory (AD) domain controller that is a replica of the

How the community answered

(33 responses)

A
6% (2)
B
88% (29)
C
3% (1)
D
3% (1)

Explanation

https://cloud.google.com/iap/docs/concepts-overview If you need to create Google Accounts for your existing users, you can use Google Cloud Directory Sync to synchronize with your Active Directory or LDAP server.

Topics

#Cloud Directory Sync#Active Directory federation#hybrid identity#SSO

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice