Question 21

Question

Your organization uses Active Directory to authenticate users. Users’ Google account access must be
removed when their Active Directory account is terminated.
How should your organization meet this requirement?

Accepted Answer

Configure single sign-on in the Google domain

Noah · Answer

B for this one, pretty sure. Had something like this in a mock, removing from IAM seems to stop access right away. Let me know if you think otherwise.

Piya · Answer

Ugh, Google always buries SSO details in docs. D imo, since single sign-on means disabling AD disables everything federated. What if the requirement was immediate revocation not just at next login, would that change things?

Jack J. · Answer

If accounts are federated with AD, then single sign-on (D) makes disabling the AD account cut Google access, but only after token expiry or next login. If you want instant removal regardless of session, SSO alone won't force a logoff, so it's not always immediate. Still picking D here since that's what Google's solution focuses on. Anyone see orgs use something extra for instant session kill?

Google Cloud-Digital-Leader Real Exam Questions [October 2026 Update] Quiz

Your organization uses Active Directory to authenticate users. Users’ Google account access must be removed when their Active Directory account is terminated. How should your organization meet this requirement?

Premium Access Includes