Your organization has experienced a recent increase in unauthorized access attempts to your company's Google Workspace instance. You need to enhance the security of user accounts while following…

Question

Options

• ADisable password recovery options to prevent unauthorized individuals from accessing user
• BImplement a strong password policy and enable text messages as the 2-Step Verification (2SV)
• CEnforce the use of physical security keys as the 2-Step Verification (2SV) method for all users.
• DEnforce a strong password policy that requires users to include special characters, numbers, and

• A
  9% (3)
• B
  3% (1)
• C
  82% (28)
• D
  6% (2)

Explanation

Physical security keys (FIDO2/WebAuthn hardware tokens) are Google's strongest recommended 2-Step Verification method and are phishing-resistant by design - they cryptographically verify both the user and the legitimate site, making them immune to credential phishing, SIM swapping, and man-in-the-middle attacks. In response to unauthorized access attempts, this is the highest-assurance control available. Option A (disabling password recovery) increases lockout risk without improving authentication security. Option B (SMS-based 2SV) is better than no 2SV but is vulnerable to SIM-swapping attacks - Google explicitly recommends against SMS as a 2SV method for high-security scenarios. Option D (strong password policy only) improves credential strength but provides no protection against phishing or credential theft without 2SV.

No community discussion yet for this question.