Google Professional Cloud Security Engineer Question 102
Select 3Google Cloud PlatformYour organization has mandated 2-step verification for all employees to enhance account security. As a Google Cloud Security Engineer, you need to enforce 2-step verification for all users in your Google Cloud organization and ensure compliance. Which steps should you take to achieve this?
- A
Enable 2-Step Verification in the 'Security' section of the Google Workspace Admin console.
- B
Set up an enforcement policy for 2-Step Verification under 'Security settings' in the Google Workspace Admin console.
- C
Notify users to voluntarily enable 2-Step Verification on their accounts if they feel it is necessary.
- D
Use the Google Cloud Resource Manager to enforce 2-Step Verification across all projects.
- E
Configure a policy in the Admin console to make 2-Step Verification mandatory for all users.
- F
Review the security audit log in the Google Workspace Admin console to track compliance with 2-Step Verification.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enforce 2-Step Verification organization-wide, you must configure and enable it in the Google Workspace Admin console. This includes enabling the feature, creating an enforcement policy, and making it mandatory for all users. The Google Cloud Resource Manager is irrelevant to this configuration, and voluntary user action does not ensure compliance. While auditing compliance is useful, it does not constitute enforcement.
- A. Correct.
This is correct. Enabling 2-Step Verification in the Google Workspace Admin console is the first step to configuring it for your organization.
- B. Correct.
This is correct. Setting up an enforcement policy ensures that users are required to comply with the 2-Step Verification configuration.
- C. Incorrect.
This is incorrect. Relying on voluntary user action does not enforce the use of 2-Step Verification and does not meet organizational security requirements.
- D. Incorrect.
This is incorrect. The Google Cloud Resource Manager is not used for configuring 2-Step Verification; this is managed in the Google Workspace Admin console.
- E. Correct.
This is correct. Configuring a mandatory policy ensures that 2-Step Verification is enforced for all users without exception.
- F. Incorrect.
This is incorrect. While reviewing the security audit log is a good practice for tracking compliance, it is not part of the configuration or enforcement process for 2-Step Verification.