Google Cloud Professional Cloud Security Engineer Practice Exam

Which step is necessary after enabling Google Cloud Directory Sync (GCDS) for managing users from an on-premises LDAP server?

1. Run a manual sync process

2. Configure LDAP search attributes

3. Set up a recurring GCDS task

4. Disable GCDS integration

The correct answer is: Set up a recurring GCDS task

After enabling Google Cloud Directory Sync (GCDS) for managing users from an on-premises LDAP server, setting up a recurring GCDS task is a necessary step. This configuration allows GCDS to systematically synchronize user data from the LDAP server to Google Cloud. By scheduling this task to run at regular intervals, user accounts and their attributes in Google Cloud are kept in sync with the on-premises directory automatically. A manual sync process may be performed initially to ensure everything is up to date right after setup, but it does not maintain ongoing synchronization, meaning it is not sufficient for long-term management. While configuring LDAP search attributes is important for how GCDS retrieves user data, it is not a step directly tied to maintaining synchronization after GCDS is enabled. Disabling GCDS integration goes against the goal of managing users via the tool, as it would halt the synchronization processes that are intended to keep the user data consistent across environments. Thus, setting up a recurring task is critical to ensuring continuous and automated user management from the LDAP server to Google Cloud.