Google Professional Cloud Security Engineer Question 5
Select 3Google Cloud PlatformYour organization wants to ensure secure access control for its Google Cloud resources. You’ve been asked to configure Cloud Identity to manage user access and enforce security policies. Which of the following actions should you take to properly manage Cloud Identity for this purpose?
- A
Enable 2-Step Verification for all Cloud Identity users.
- B
Assign the 'Super Admin' role to all users to simplify access management.
- C
Configure organizational units (OUs) to group users and apply tailored policies.
- D
Set up context-aware access to enforce conditions based on user location and device.
- E
Disable automatic user account provisioning via third-party applications for better control.
Show answer and explanation
Correct answers: A, C, D
Explanation
To manage Cloud Identity effectively and securely, you should implement measures like 2-Step Verification to protect user accounts, group users into OUs to apply tailored policies, and configure context-aware access to enforce conditional access. These actions align with best practices and enhance your organization's security posture, while assigning overly broad roles or disabling standard provisioning methods without valid reasons can introduce risks or inefficiencies.
- A. Correct.
Enabling 2-Step Verification helps protect user accounts from unauthorized access by adding an extra layer of security.
- B. Incorrect.
Assigning the 'Super Admin' role to all users is a security risk as it provides excessive permissions and violates the principle of least privilege.
- C. Correct.
Configuring OUs allows you to group users logically and apply policies suited to their specific needs, improving security and manageability.
- D. Correct.
Setting up context-aware access ensures access is granted only when specific criteria, such as location or device compliance, are met, thereby improving security.
- E. Incorrect.
Disabling automatic user account provisioning is not required in most cases; instead, you can manage provisioning securely using appropriate tools and policies.