Google Professional Cloud Security Engineer Question 105
Select 2Google Cloud PlatformYour organization uses Google Workspace, and as a security engineer, you are tasked with ensuring that all users in the organization must use 2-step verification (2SV) to access their accounts. Additionally, you need to configure the environment so that users cannot disable 2SV from their account settings. What steps should you take to achieve this?
- A
Enable 2-step verification for all users in the Google Workspace Admin Console.
- B
Set the enforcement policy for 2-step verification in the Google Workspace Admin Console to 'Enforce'.
- C
Instruct users to enable 2-step verification manually in their account settings.
- D
Disable the option for users to turn off 2-step verification in the Google Workspace Admin Console.
- E
Set up a policy in the Access Context Manager to enforce 2-step verification.
Show answer and explanation
Correct answers: A, B
Explanation
To enforce 2-step verification for all users in Google Workspace, you need to enable it and configure the enforcement policy in the Admin Console. This ensures compliance and prevents users from bypassing the security requirement. Other options like relying on manual setup by users or using unrelated tools like Access Context Manager will not fulfill the requirement.
- A. Correct.
Correct: Enabling 2-step verification in the Google Workspace Admin Console is the first step to enforce 2SV for all users.
- B. Correct.
Correct: Setting the enforcement policy to 'Enforce' ensures that 2-step verification becomes mandatory for all users, and they cannot bypass this requirement.
- C. Incorrect.
Incorrect: While users can enable 2-step verification manually, this approach does not enforce it across the organization or prevent users from disabling it.
- D. Incorrect.
Incorrect: There is no specific setting in the Google Workspace Admin Console to 'disable the option' for users to turn off 2-step verification. Enforcement policies handle this.
- E. Incorrect.
Incorrect: Access Context Manager is not used to enforce 2-step verification; it is used for context-aware access policies.