Question 23

Question

Your organization is using Active Directory and wants to configure Security Assertion Markup
Language (SAML). You must set up and enforce single sign-on (SSO) for all users.
What should you do?

Accepted Answer

1- Create a new SAML profile.
•
2. Populate the sign-in and sign-out page URLs.
•
3. Upload the X.509 certificate.
•
4. Configure Entity ID and ACS URL in your IdP

Rowan P. · Answer

Not sure D is right here because it talks about OIDC, and the question is only about SAML. C lists the typical SAML steps like setting sign-in/sign-out URLs, uploading X.509 cert, and configuring ACS URL in your IdP. The "change password URL" in B is more of a red herring I think. Pretty sure it's C but open to hearing other logic!

Ben · Answer

C tbh, B is tempting but that change password URL isn't normally required for SAML SSO setups.

Logan · Answer

C or BI picked B because uploading the X.509 and setting the change password URL sounded right, but now not sure.

Daniel R. · Answer

D

QuietNeteng2244 · Answer

Its C, had something like this in a mock. Profile creation, URLs, and X.509 are standard SAML SSO steps.

Google Professional Cloud Security Engineer Real Exam Questions [October 2026 Update] Quiz

Your organization is using Active Directory and wants to configure Security Assertion Markup Language (SAML). You must set up and enforce single sign-on (SSO) for all users. What should you do?

Premium Access Includes