Google Professional Cloud Security Engineer Question 106
Select 3Google Cloud PlatformYour organization requires all employees to use 2-step verification for accessing Google Cloud resources. As a Professional Cloud Security Engineer, you are tasked with configuring this requirement. Which steps should you take to enforce 2-step verification across all users in your organization?
- A
Enable 2-step verification for all users in the Admin Console under 'Security Settings'.
- B
Set up an organizational policy in Google Cloud to enforce 2-step verification.
- C
Require 2-step verification by enabling it in the 'Identity and Access Management' (IAM) section of Google Cloud.
- D
Enroll all users in an appropriate 2-step verification method, such as Google Authenticator or security keys.
- E
Use Context-Aware Access to enforce 2-step verification policies for specific groups or resources.
Show answer and explanation
Correct answers: A, D, E
Explanation
To enforce 2-step verification for all users, you must enable it in the Admin Console's 'Security Settings' and ensure users are enrolled in a compatible 2-step verification method. Additionally, Context-Aware Access can be used to enforce these policies for specific groups or resources, providing an additional layer of granularity and control. IAM and organizational policies are not used to manage 2-step verification.
- A. Correct.
Correct: Enabling 2-step verification in the Admin Console under 'Security Settings' is the correct way to enforce this requirement for all users.
- B. Incorrect.
Incorrect: Organizational policies in Google Cloud do not control 2-step verification settings. These policies are used for other resource-level constraints.
- C. Incorrect.
Incorrect: IAM in Google Cloud does not include options to enforce 2-step verification directly. This is managed at the identity level using the Admin Console.
- D. Correct.
Correct: Enrolling users in a 2-step verification method is a necessary action to ensure compliance with the enforcement policy.
- E. Correct.
Correct: Context-Aware Access can enhance 2-step verification enforcement by applying policies to specific users, groups, or resources based on conditions.