Google Professional Cloud Security Engineer Question 90
Select 3Google Cloud PlatformYou are a security engineer tasked with designing a password and session management policy for user accounts in your Google Cloud environment. Which of the following practices should you enforce to ensure compliance with security best practices?
- A
Enforce a minimum password length of 8 characters and require at least one uppercase letter, one special character, and one number.
- B
Allow users to reuse their previous passwords to maintain convenience.
- C
Set session timeouts for inactive users to automatically log them out after a specified period.
- D
Require multi-factor authentication (MFA) for access to sensitive resources.
- E
Disable account lockout policies to reduce the risk of denial-of-service attacks.
Show answer and explanation
Correct answers: A, C, D
Explanation
A robust password and session management policy is essential for securing user accounts in Google Cloud. Enforcing strong password requirements, setting session timeouts for inactive users, and implementing multi-factor authentication are all critical practices that align with security best practices. Allowing password reuse or disabling account lockout policies would weaken the overall security posture and should be avoided.
- A. Correct.
Enforcing a minimum password length and complexity requirements helps mitigate the risk of brute force attacks and ensures stronger passwords.
- B. Incorrect.
Allowing users to reuse passwords is a poor security practice as it increases the risk of credential compromise due to password leaks or reuse across multiple platforms.
- C. Correct.
Setting session timeouts for inactive users ensures that unattended sessions are not exploited by attackers, reducing the risk of unauthorized access.
- D. Correct.
Requiring MFA adds an extra layer of security, especially for sensitive resources, making it harder for attackers to gain unauthorized access even if passwords are compromised.
- E. Incorrect.
Disabling account lockout policies is not recommended as it could allow attackers to continuously attempt brute force attacks without any restrictions.