Google Professional Cloud Security Engineer Question 16
Select 2Google Cloud PlatformYour organization uses Google Workspace with a super administrator account that is primarily used for critical administrative tasks. To enhance the security of this account, which of the following actions should you take? (Choose two)
- A
Enable multi-factor authentication (MFA) for the super administrator account.
- B
Share the super administrator account credentials with multiple administrators for convenience.
- C
Restrict the usage of the super administrator account to specific IP ranges.
- D
Set up a recovery email and phone number for the super administrator account.
- E
Use the super administrator account for daily operational tasks such as user management and billing.
Show answer and explanation
Correct answers: A, C
Explanation
Securing the super administrator account is critical because it has the highest level of permissions in Google Workspace. Enabling multi-factor authentication (MFA) protects against unauthorized access even if the password is compromised. Restricting the account's usage to specific IP ranges provides an added layer of security by limiting access to trusted networks. These measures align with best practices for securing privileged accounts.
- A. Correct.
Enabling multi-factor authentication (MFA) significantly enhances the security of the super administrator account by requiring an additional layer of verification beyond just the password.
- B. Incorrect.
Sharing credentials is a poor security practice. It increases the risk of unauthorized access and makes it difficult to track accountability in case of a security incident.
- C. Correct.
Restricting the usage of the super administrator account to specific IP ranges reduces the attack surface by only allowing logins from trusted networks, further securing the account.
- D. Incorrect.
While setting up recovery information is helpful for account recovery, it is not a security enhancement to prevent unauthorized access.
- E. Incorrect.
Using the super administrator account for daily operational tasks increases the risk of exposure and compromises the principle of least privilege, which is a key security best practice.