A customer terminates an engineer and needs to make sure the engineer's Google account is automatically deprovisioned. What should the customer do?

A customer terminates an engineer and needs to make sure the engineer's Google account is automatically deprovisioned.
What should the customer do?

A. Use the Cloud SDK with their directory service to remove their IAM permissions in Cloud Identity. B. Use the Cloud SDK with their directory service to provision and deprovision users from Cloud Identity. C. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity. D. Configure Cloud Directory Sync with their directory service to remove their IAM permissions in Cloud Identity.