Google Professional Cloud Security Engineer Question 107
Select 3Google Cloud PlatformYour organization uses Google Workspace, and you have been tasked with ensuring all users are required to use 2-step verification when accessing Google Cloud resources. What steps should you take to enforce this security requirement?
- A
Enable 2-step verification in the Google Workspace Admin Console under 'Security settings'.
- B
Configure an Organizational Unit (OU) in Google Workspace for applying the 2-step verification policy to a specific group of users.
- C
Use the Identity and Access Management (IAM) roles in Google Cloud to enforce 2-step verification for specific users.
- D
Enable 'Enforce 2-Step Verification' in the Google Workspace Admin Console and configure the enforcement to apply to all users.
- E
Use Security Command Center in Google Cloud to enable and enforce 2-step verification.
Show answer and explanation
Correct answers: A, B, D
Explanation
To enforce 2-step verification in Google Workspace, you must configure the policy in the Admin Console. You can apply the policy globally to all users or target specific groups using Organizational Units. IAM roles and Security Command Center are not relevant for this task because they do not manage authentication policies. Enforcing 2-step verification helps protect accounts from unauthorized access, especially in environments with sensitive data and resources in Google Cloud.
- A. Correct.
Correct. Enabling 2-step verification in the Google Workspace Admin Console is the starting point to implement this security feature.
- B. Correct.
Correct. Configuring an Organizational Unit allows you to apply the 2-step verification policy to specific groups of users if necessary.
- C. Incorrect.
Incorrect. IAM roles in Google Cloud are used to manage permissions and access control, but they do not enforce 2-step verification directly.
- D. Correct.
Correct. Enabling 'Enforce 2-Step Verification' in the Google Workspace Admin Console ensures that the policy is mandatory for all users.
- E. Incorrect.
Incorrect. Security Command Center is used for managing security insights and monitoring, but it is not used to enforce 2-step verification policies.