Google Professional Cloud Security Engineer Question 95
Select 3Google Cloud PlatformYour organization wants to enforce a secure password and session management policy for user accounts in Google Cloud. Which of the following actions align with best practices for this requirement?
- A
Enforce a minimum password length of 8 characters, including a mix of upper-case, lower-case, numbers, and special characters.
- B
Configure session timeouts for user accounts to automatically terminate sessions after a period of inactivity.
- C
Allow users to reuse their last five passwords to improve ease of use.
- D
Enable multi-factor authentication (MFA) for all user accounts to enhance security.
- E
Disable password rotation policies to reduce operational overhead.
Show answer and explanation
Correct answers: A, B, D
Explanation
To create a robust password and session management policy, you should enforce strong password requirements, configure session timeouts, and enable multi-factor authentication. These measures collectively help protect user accounts from unauthorized access and mitigate security risks. Avoid practices that weaken security, such as allowing password reuse or disabling password rotation policies.
- A. Correct.
This option is correct because setting a strong password policy is a fundamental security best practice to prevent unauthorized access.
- B. Correct.
This option is correct as configuring session timeouts helps mitigate the risk of unauthorized access due to unattended sessions.
- C. Incorrect.
This option is incorrect because allowing users to reuse previous passwords weakens security and increases the risk of credential compromise.
- D. Correct.
This option is correct because enabling MFA adds an additional layer of security to user accounts, reducing the likelihood of account compromise.
- E. Incorrect.
This option is incorrect because disabling password rotation policies can lead to stale passwords being used, increasing the risk of account compromise.