Associate Cloud Engineer free question 1 / 10 · Domain 1: Setting up a cloud solution environment
You want Okta to automatically send groups, in addition to users, to Cloud Identity, and the set of groups you want to send will keep growing. According to the Architecture Center guide, which group assignment configuration fits?
- Assign the Everyone group so that groups added later are sent too
- Decide the targets by a group naming convention and create a Push groups rule
- Use Assign to groups to assign a parent group so that its child groups are also sent
- Enable Import Groups so that new groups are kept in line with Cloud Identity
Show the answer and explanation
Answer: B
Why this is correct
The guide says that if you want Okta to send groups to Cloud Identity or Google Workspace as well, it is better to configure Okta to send groups based on a naming convention than to select groups one by one. As an example, to send all groups whose names start with google-cloud, it shows how to open Find groups by role under Push groups and create a rule on the Push groups by rule page for group names that start with google-cloud. When you create groups with names that match the rule, the groups added later are covered too.
Why the other options are wrong
"Use Assign to groups to assign a parent group so that its child groups are also sent" … Assign to groups on the Assignments tab is the step that decides which Okta users are provisioned to Cloud Identity or Google Workspace. The guide treats sending the groups themselves as a separate setting, made on the Push groups tab.
"Enable Import Groups so that new groups are kept in line with Cloud Identity" … Import Groups brings groups that already exist in Cloud Identity or Google Workspace into Okta, which is the opposite direction. The guide says to leave it disabled unless you have such groups.
"Assign the Everyone group so that groups added later are sent too" … Assigning the Everyone group is the step for provisioning all Okta users (user assignment). It is separate from the setting that sends groups.
Key point
You can also select and send groups one at a time, but the guide recommends sending them based on a naming convention. When you create groups with names that match the rule, the groups added later are covered too. For automatic user provisioning, enable Create users, Update user attributes, and Deactivate users, and disable Sync password. If something does not work, check View logs on the application settings page.
Go to the Associate Cloud Engineer practice app (10 free questions; purchase unlocks all questions)