Google Professional Cloud Security Engineer Question 104
Select 2Google Cloud PlatformYour organization requires all users to enable 2-step verification (2SV) for enhanced account security. As a Professional Cloud Security Engineer, you need to ensure that 2SV is configured and enforced across all accounts in the Google Workspace. What actions must you take to meet this requirement?
- A
Set up an organizational policy to enforce 2-step verification in Google Workspace Admin Console.
- B
Enable 2-step verification for all users in the Google Cloud Console under the Security section.
- C
Create a group in Google Workspace with a security policy requiring 2-step verification and add all users to this group.
- D
Use the Security Settings in Google Workspace Admin Console to set enforcement for 2-step verification.
- E
Communicate to all users that they must enable 2-step verification on their accounts manually.
Show answer and explanation
Correct answers: A, D
Explanation
To enforce 2-step verification for all users, you must configure it through the Google Workspace Admin Console. This can be done either through setting an organizational policy or using the Security Settings. Relying on user actions or partial group policies will not ensure compliance across the organization.
- A. Correct.
Correct. Enforcing 2-step verification through the Google Workspace Admin Console is required to ensure compliance across the organization.
- B. Incorrect.
Incorrect. The Google Cloud Console does not manage 2-step verification settings for Google Workspace accounts. 2SV is managed through the Google Workspace Admin Console.
- C. Incorrect.
Incorrect. While creating a group with security policies is an option for managing specific users, it is not sufficient to enforce 2-step verification for all users organization-wide.
- D. Correct.
Correct. The Security Settings in the Google Workspace Admin Console allow you to enforce 2-step verification for users effectively.
- E. Incorrect.
Incorrect. Simply communicating to users is not sufficient to enforce 2-step verification. Admin-level enforcement is required.