Google Professional Cloud Security Engineer Exam - Topic 2 Question 77 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 77
Topic #: 2

[All Professional Cloud Security Engineer Questions]

Your organization uses Google Workspace Enterprise Edition tor authentication. You are concerned about employees leaving their laptops unattended for extended periods of time after authenticating into Google Cloud. You must prevent malicious people from using an employee's unattended laptop to modify their environment.

What should you do?

ACreate a policy that requires employees to not leave their sessions open for long durations.

BReview and disable unnecessary Google Cloud APIs.

CRequire strong passwords and 2SV through a security token or Google authenticate.

DSet the session length timeout for Google Cloud services to a shorter duration.

Show Suggested Answer

Suggested Answer: C, D

https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance#considerations

Confidential VM does not support live migration. You can only enable Confidential Computing on a VM when you first create the instance. https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance

by Ernest at Apr 29, 2024, 08:08 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Frankie

6 months ago

Wait, can we really enforce session timeouts? Sounds tricky!

upvoted 0 times

...

Amber

6 months ago

Disabling APIs seems a bit extreme for this issue.

upvoted 0 times

...

Harrison

6 months ago

I’m not sure a policy will actually stop people from leaving their laptops open.

upvoted 0 times

...

Dalene

7 months ago

Agree, but what about option C? Strong passwords are super important too!

upvoted 0 times

...

Shanda

7 months ago

I think option D is the best choice. Shorter session timeouts are key.

upvoted 0 times

...

Marisha

7 months ago

I think option D makes the most sense because it directly addresses the risk of unattended sessions.

upvoted 0 times

...

Kenneth

7 months ago

I practiced a similar question where we had to secure user sessions, and I think requiring strong passwords and 2SV is important, but it might not solve the unattended laptop issue directly.

upvoted 0 times

...

Lashawn

7 months ago

I'm not entirely sure, but I feel like just telling employees not to leave their sessions open might not be enough.

upvoted 0 times

...

Tess

8 months ago

I remember discussing session management in class, and I think setting a session timeout could be really effective.

upvoted 0 times

...

Lorita

8 months ago

I feel pretty confident about this one. Requiring strong passwords and 2-factor authentication (option C) is a solid way to secure access, even if the laptop is left unattended for a bit.

upvoted 0 times

...

Gayla

8 months ago

Okay, I think the key here is preventing unauthorized access to the employee's environment if their laptop is left unattended. So I'd go with option D to set a shorter session timeout for Google Cloud services.

upvoted 0 times

...

Steffanie

8 months ago

Hmm, I'm a bit unsure about this one. I'd want to make sure I understand the full context and implications of each option before choosing. Maybe I'll make a quick list of the pros and cons for each.

upvoted 0 times

...

Halina

8 months ago

This seems like a straightforward security question. I'd focus on options that directly address the issue of unattended laptops, like setting a shorter session timeout.

upvoted 0 times

...

Tamekia

8 months ago

I'm pretty confident that VLAN is the right answer here. Separating the data plane paths for the two servers is exactly what VLANs are designed for.

upvoted 0 times

...

Alyce

8 months ago

Option D makes the most sense to me. We need to balance business value and risk during prioritization.

upvoted 0 times

...

Raymon

1 year ago

Ooh, I like the sound of option C. Gotta keep those credentials locked down tight. But maybe I should also consider hiding the laptops in a lead-lined safe... just in case.

upvoted 0 times

Paulina

11 months ago

Kris: Agreed, better safe than sorry!

upvoted 0 times

...

Sunny

11 months ago

User 3: Maybe hiding the laptops in a lead-lined safe isn't necessary, but it's always good to be cautious.

upvoted 0 times

...

Kris

11 months ago

User 2: Yeah, it's crucial to keep those credentials secure.

upvoted 0 times

...

Felice

12 months ago

User 1: Option C sounds like a good idea. Strong passwords and 2SV are important.

upvoted 0 times

...

Susy

1 year ago

I'm all about that option D! Shorter session timeouts are the way to keep those wandering laptops secure. Who needs to be logged in for hours, am I right?

upvoted 0 times

...

Mabel

1 year ago

I think option D is also important, setting session timeout can add an extra layer of security.

upvoted 0 times

...

Timothy

1 year ago

I agree with Raina, strong passwords and 2SV would definitely help prevent unauthorized access.

upvoted 0 times

...

Raina

1 year ago

I think we should go with option C.

upvoted 0 times

...

Isabella

1 year ago

I think option D is also important, setting session timeout can add an extra layer of security.

upvoted 0 times

...

Winifred

1 year ago

Wow, this is a tricky one! I'm torn between C and D, but I think C might be the way to go. Strong passwords and 2SV are just good security hygiene, you know?

upvoted 0 times