Discuss Google Professional Cloud Security Engineer Exam Topic 2 Question 77

Your organization uses Google Workspace Enterprise Edition tor authentication. You are concerned about employees leaving their laptops unattended for extended periods of time after authenticating into Google Cloud. You must prevent malicious people from using an employee's unattended laptop to modify their environment.

What should you do?

ACreate a policy that requires employees to not leave their sessions open for long durations.

BReview and disable unnecessary Google Cloud APIs.

CRequire strong passwords and 2SV through a security token or Google authenticate.

DSet the session length timeout for Google Cloud services to a shorter duration.

Suggested Answer: C, D

https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance#considerations

Confidential VM does not support live migration. You can only enable Confidential Computing on a VM when you first create the instance. https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Frankie 11 months ago

Wait, can we really enforce session timeouts? Sounds tricky!

Amber 11 months ago

Disabling APIs seems a bit extreme for this issue.

Harrison 11 months ago

I’m not sure a policy will actually stop people from leaving their laptops open.

Dalene 11 months ago

Agree, but what about option C? Strong passwords are super important too!

Shanda 12 months ago

I think option D is the best choice. Shorter session timeouts are key.

Marisha 12 months ago

I think option D makes the most sense because it directly addresses the risk of unattended sessions.

Kenneth 1 year ago

I practiced a similar question where we had to secure user sessions, and I think requiring strong passwords and 2SV is important, but it might not solve the unattended laptop issue directly.

Lashawn 1 year ago

I'm not entirely sure, but I feel like just telling employees not to leave their sessions open might not be enough.

Tess 1 year ago

I remember discussing session management in class, and I think setting a session timeout could be really effective.

Lorita 1 year ago

I feel pretty confident about this one. Requiring strong passwords and 2-factor authentication (option C) is a solid way to secure access, even if the laptop is left unattended for a bit.

Gayla 1 year ago

Okay, I think the key here is preventing unauthorized access to the employee's environment if their laptop is left unattended. So I'd go with option D to set a shorter session timeout for Google Cloud services.

Steffanie 1 year ago

Hmm, I'm a bit unsure about this one. I'd want to make sure I understand the full context and implications of each option before choosing. Maybe I'll make a quick list of the pros and cons for each.

Halina 1 year ago

This seems like a straightforward security question. I'd focus on options that directly address the issue of unattended laptops, like setting a shorter session timeout.

Tamekia 1 year ago

I'm pretty confident that VLAN is the right answer here. Separating the data plane paths for the two servers is exactly what VLANs are designed for.

Alyce 1 year ago

Option D makes the most sense to me. We need to balance business value and risk during prioritization.

Raymon 2 years ago

Ooh, I like the sound of option C. Gotta keep those credentials locked down tight. But maybe I should also consider hiding the laptops in a lead-lined safe... just in case.

Paulina 1 year ago

↳ replying to Raymon

Kris: Agreed, better safe than sorry!

Sunny 1 year ago

↳ replying to Raymon

User 3: Maybe hiding the laptops in a lead-lined safe isn't necessary, but it's always good to be cautious.

Kris 1 year ago

↳ replying to Raymon

User 2: Yeah, it's crucial to keep those credentials secure.

Felice 1 year ago

↳ replying to Raymon

User 1: Option C sounds like a good idea. Strong passwords and 2SV are important.

Susy 2 years ago

I'm all about that option D! Shorter session timeouts are the way to keep those wandering laptops secure. Who needs to be logged in for hours, am I right?

Mabel 2 years ago

I think option D is also important, setting session timeout can add an extra layer of security.

Timothy 2 years ago

I agree with Raina, strong passwords and 2SV would definitely help prevent unauthorized access.

Raina 2 years ago

I think we should go with option C.

Isabella 2 years ago

I think option D is also important, setting session timeout can add an extra layer of security.

Winifred 2 years ago

Wow, this is a tricky one! I'm torn between C and D, but I think C might be the way to go. Strong passwords and 2SV are just good security hygiene, you know?

Zana 1 year ago

↳ replying to Winifred

That sounds like a good plan. Let's make sure our data stays safe and secure.

Theola 1 year ago

↳ replying to Winifred

True, it's a tough decision. Maybe we should implement both measures for extra security.

Cecily 1 year ago

↳ replying to Winifred

But setting session timeouts could also help prevent unauthorized access if a laptop is left unattended.

Lili 1 year ago

↳ replying to Winifred

I agree, strong passwords and 2SV are essential for protecting our data.

Louann 2 years ago

I agree with Keva, strong passwords and 2SV would definitely help prevent unauthorized access.

Keva 2 years ago

I think we should go with option C.

Google Professional Cloud Security Engineer Exam - Topic 2 Question 77 Discussion