Google Professional Cloud Security Engineer Question 86
Select 3Google Cloud PlatformYour organization is using Google Cloud and wants to enforce strong authentication for accessing Cloud resources. The organization wants to ensure that only corporate-managed devices can access sensitive workloads, and that multi-factor authentication (MFA) is used for all employees. Which of the following steps should you take to achieve this requirement?
- A
Enable Context-Aware Access and configure device-based access policies.
- B
Require OAuth2 as the only authentication protocol for all users.
- C
Enforce multi-factor authentication (MFA) by configuring Google Workspace or Cloud Identity settings.
- D
Create a custom IAM role to restrict access based on user devices.
- E
Integrate a third-party identity provider (IdP) that supports device-based and MFA policies.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the organization’s requirements, you need to enforce device-based access policies and multi-factor authentication. Context-Aware Access is a native Google Cloud feature that allows you to restrict access based on device attributes, while configuring MFA through Google Workspace or Cloud Identity ensures a second layer of authentication. Additionally, integrating a third-party identity provider can provide advanced authentication capabilities, including device management and MFA enforcement.
- A. Correct.
Correct. Context-Aware Access allows administrators to set access policies based on attributes such as device security status, which can restrict access to corporate-managed devices.
- B. Incorrect.
Incorrect. While OAuth2 is a widely used authentication protocol, it does not enforce device-based access or MFA requirements by itself.
- C. Correct.
Correct. Enforcing MFA ensures that users must provide a second factor of authentication, which strengthens access security.
- D. Incorrect.
Incorrect. Creating a custom IAM role does not directly address device-based or MFA enforcement. Context-Aware Access and identity management are more appropriate solutions.
- E. Correct.
Correct. Integrating a third-party IdP that supports device-based access policies and MFA provides flexibility and enhances security for authentication.