Google Professional Cloud Security Engineer Question 17
Select 3Google Cloud PlatformYour organization uses Google Workspace and Google Cloud Platform, and you are tasked with securing the super administrator account. Which of the following actions should you take to properly secure this account?
- A
Enable 2-Step Verification (2SV) for the super administrator account.
- B
Grant the super administrator role to multiple users for redundancy.
- C
Use a dedicated service account as the super administrator to avoid human-related risks.
- D
Monitor audit logs for any suspicious activity involving the super administrator account.
- E
Restrict the use of the super administrator account to only critical administrative tasks.
Show answer and explanation
Correct answers: A, D, E
Explanation
Securing the super administrator account is crucial because it has extensive privileges across Google Workspace and Google Cloud Platform. Best practices include enabling 2-Step Verification (2SV) to protect against unauthorized access, monitoring audit logs to identify suspicious activities, and limiting the use of the account to critical administrative tasks to reduce potential risks. Granting the super administrator role to multiple users or using a service account does not align with security best practices.
- A. Correct.
Enabling 2-Step Verification (2SV) adds an extra layer of security to the super administrator account, making it more difficult for unauthorized access.
- B. Incorrect.
Granting the super administrator role to multiple users increases the attack surface and the risk of misuse, which goes against security best practices.
- C. Incorrect.
Using a service account as a super administrator is not recommended because service accounts are not intended for human interaction and lack certain security mechanisms like 2SV.
- D. Correct.
Monitoring audit logs for suspicious activity is essential for detecting potential compromises or unauthorized actions involving the super administrator account.
- E. Correct.
Restricting the use of the super administrator account to critical tasks minimizes the risk of accidental or malicious changes and aligns with the principle of least privilege.