Google Professional Cloud Security Engineer Question 93
Select 3Google Cloud PlatformYou are designing a password and session management policy for your organization’s Google Cloud environment. Which of the following practices should you include to enhance security and meet compliance requirements?
- A
Enforce the use of multi-factor authentication (MFA) for all user accounts.
- B
Set a maximum session duration to automatically log out inactive users.
- C
Allow users to reuse their last 5 passwords to avoid inconvenience.
- D
Require a minimum password length of 8 characters and complexity requirements such as uppercase letters, numbers, and symbols.
- E
Disable session timeouts for service accounts to ensure uninterrupted workflows.
Show answer and explanation
Correct answers: A, B, D
Explanation
Creating a password and session management policy involves ensuring robust security controls like enforcing MFA, setting session timeouts, and requiring strong passwords. These measures reduce the risk of unauthorized access and credential-related attacks. Avoid practices like allowing password reuse or disabling session timeouts, as these can introduce significant vulnerabilities.
- A. Correct.
Enforcing multi-factor authentication (MFA) adds an extra layer of security for user accounts, reducing the likelihood of unauthorized access, which is a best practice for securing cloud environments.
- B. Correct.
Setting a maximum session duration ensures that inactive users are logged out automatically, reducing the risk of session hijacking or unauthorized access.
- C. Incorrect.
Allowing users to reuse recent passwords weakens security and increases the risk of credential compromise. It is not a recommended practice in a secure password policy.
- D. Correct.
Requiring minimum password length and complexity ensures stronger passwords, making them harder to guess or crack, which is critical for securing user accounts.
- E. Incorrect.
Disabling session timeouts for service accounts can lead to security vulnerabilities. Instead, service accounts should be carefully managed with least privilege and short-lived credentials.