Google Professional Cloud Security Engineer Question 103
Select 3Google Cloud PlatformYour organization requires all employees to use 2-Step Verification (2SV) when accessing Google Cloud resources. You have been tasked with ensuring compliance by configuring and enforcing 2SV across your Google Workspace domain. Which steps should you take to enforce 2-Step Verification for all users in the organization?
- A
Enable 2-Step Verification in the Google Workspace Admin console under Security settings.
- B
Configure an enforcement policy for 2-Step Verification under the Google Workspace Admin console.
- C
Notify users to voluntarily enable 2-Step Verification in their Google accounts.
- D
Set up a security key as the only allowed 2-Step Verification method for all users.
- E
Monitor the 2-Step Verification enforcement status using the Google Workspace reports.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enforce 2-Step Verification in Google Workspace, you must enable the feature, configure an enforcement policy, and monitor compliance. Merely notifying users to enable 2-Step Verification or configuring specific methods without enforcement does not ensure organizational compliance. Monitoring through reports allows you to identify any users who are still non-compliant.
- A. Correct.
Correct. Enabling 2-Step Verification in the Google Workspace Admin console is the first step to making the feature available to all users.
- B. Correct.
Correct. Configuring an enforcement policy ensures that all users are required to use 2-Step Verification, which is necessary to enforce compliance.
- C. Incorrect.
Incorrect. While notifying users is a good practice, relying on voluntary adoption does not enforce compliance with the organizational policy.
- D. Incorrect.
Incorrect. Security keys can be configured as one of the allowed methods, but enforcing only one method (e.g., security keys) is not mandatory to configure 2-Step Verification.
- E. Correct.
Correct. Monitoring the enforcement status through reports is essential to verify whether all users are compliant with the 2-Step Verification policy.