Google Professional Cloud Security Engineer Question 15
Select 3Google Cloud PlatformYour organization uses Google Workspace and has a super administrator account to manage your Google Cloud resources. To enhance the security of this account, what measures should you implement to protect it from unauthorized access?
- A
Enable 2-Step Verification (2SV) for the super administrator account.
- B
Assign multiple users as super administrators to ensure redundancy.
- C
Use a hardware security key for additional protection on the super administrator account.
- D
Avoid using the super administrator account for day-to-day administrative tasks.
- E
Disable the super administrator account to prevent unauthorized access entirely.
Show answer and explanation
Correct answers: A, C, D
Explanation
Protecting the super administrator account is critical to maintaining the security of Google Cloud resources. Enabling 2-Step Verification (2SV) and using a hardware security key provide strong authentication measures, reducing the likelihood of unauthorized access. Minimizing the use of this account for day-to-day tasks ensures that it is not unnecessarily exposed to risks. Assigning multiple super administrators or disabling the account entirely are not advisable approaches, as they either increase risks or make account recovery and management impossible.
- A. Correct.
Enabling 2-Step Verification (2SV) adds an additional layer of security to the super administrator account, protecting it from unauthorized access even if the password is compromised.
- B. Incorrect.
While redundancy might seem beneficial, assigning multiple users as super administrators increases the attack surface and goes against the principle of least privilege.
- C. Correct.
Using a hardware security key is a best practice for securing critical accounts like the super administrator account, as it provides strong authentication.
- D. Correct.
The super administrator account should not be used for day-to-day tasks to minimize exposure and reduce the risk of it being targeted by attackers.
- E. Incorrect.
Disabling the super administrator account is not recommended as it is a critical account required for managing the organization’s Google Cloud resources.