Google Professional Cloud Security Engineer Question 91
Select 3Google Cloud PlatformYou are tasked with designing a password and session management policy for user accounts in your organization using Google Cloud Identity. The policy must align with industry best practices for security and comply with organizational requirements. Which of the following configurations should you implement to ensure a secure password and session management policy?
- A
Set a minimum password length of at least 8 characters and enforce the use of at least one uppercase letter, one number, and one special character.
- B
Enable password expiration policies to require users to change their passwords every 90 days.
- C
Disable session timeouts to allow uninterrupted user workflows.
- D
Implement two-factor authentication (2FA) for all user accounts to enhance security.
- E
Allow users to reuse their previous passwords to simplify password management.
Show answer and explanation
Correct answers: A, B, D
Explanation
A strong password and session management policy should enforce password complexity, regular password expiration, and multi-factor authentication (e.g., 2FA) while ensuring sessions are securely managed with appropriate timeouts. Avoid practices such as allowing password reuse or disabling session timeouts, as these can introduce significant security vulnerabilities.
- A. Correct.
Setting a minimum password length and requiring complexity ensures strong passwords that are harder to guess or crack, aligning with industry best practices.
- B. Correct.
Enabling password expiration policies reduces the risk of compromised credentials being used for prolonged periods, which is a common security best practice.
- C. Incorrect.
Disabling session timeouts is a security risk as it increases the likelihood of unauthorized access if a session is left unattended.
- D. Correct.
Implementing two-factor authentication (2FA) adds an additional layer of security to user accounts, making it significantly harder for attackers to gain access even if passwords are compromised.
- E. Incorrect.
Allowing password reuse weakens security and increases the risk of credential-based attacks, as previously compromised passwords could be used again.