Google Professional Cloud Security Engineer Question 14
Select 3Google Cloud PlatformA company is using Google Workspace and Google Cloud to manage its resources. The security team wants to ensure the Super Administrator account for their Google Workspace domain is protected against unauthorized access. What are the best practices they should implement?
- A
Enable two-factor authentication (2FA) for the Super Administrator account.
- B
Use the Super Administrator account for daily administrative tasks.
- C
Limit the Super Administrator account's usage to critical tasks only.
- D
Disable the Super Administrator account to prevent misuse.
- E
Monitor activity logs for actions performed by the Super Administrator account.
Show answer and explanation
Correct answers: A, C, E
Explanation
To protect the Super Administrator account, it is critical to follow security best practices such as enabling two-factor authentication, limiting its use to critical tasks, and monitoring its activity logs. These measures help ensure that this highly privileged account is not misused or compromised, while still being available for essential administrative functions. Avoid using it for routine tasks to minimize exposure, and never disable the account as it is required for critical operations.
- A. Correct.
Enabling two-factor authentication (2FA) adds an additional layer of security, reducing the risk of unauthorized access to the Super Administrator account.
- B. Incorrect.
The Super Administrator account should not be used for daily administrative tasks because it increases the attack surface and risk of compromise.
- C. Correct.
Limiting the use of the Super Administrator account to critical tasks only is a best practice to reduce its exposure and vulnerability.
- D. Incorrect.
Disabling the Super Administrator account is not feasible because it is required for critical administrative functions in Google Workspace.
- E. Correct.
Monitoring activity logs for the Super Administrator account ensures that any unauthorized or suspicious actions can be quickly identified and investigated.