nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #117

Your organization has implemented synchronization and SAML federation between Cloud Identity and Microsoft Active Directory. You want to reduce the risk of Google Cloud user accounts being…

The correct answer is C. Create an Active Directory domain password policy with strong password settings, and configure. https://cloud.google.com/identity/solutions/enforce-mfa#use_security_keys Use security keys We recommend requiring security keys for those employees who create and access data that needs the highest level of security. You should require 2SV for all other employees and encourage…

Submitted by rohit_dlh· Apr 18, 2026Configuring access within a cloud solution environment

Question

Your organization has implemented synchronization and SAML federation between Cloud Identity and Microsoft Active Directory. You want to reduce the risk of Google Cloud user accounts being compromised. What should you do?

Options

  • ACreate a Cloud Identity password policy with strong password settings, and configure 2-Step
  • BCreate a Cloud Identity password policy with strong password settings, and configure 2-Step
  • CCreate an Active Directory domain password policy with strong password settings, and configure
  • DCreate an Active Directory domain password policy with strong password settings, and configure

How the community answered

(31 responses)
  • A
    16% (5)
  • B
    10% (3)
  • C
    71% (22)
  • D
    3% (1)

Explanation

https://cloud.google.com/identity/solutions/enforce-mfa#use_security_keys Use security keys We recommend requiring security keys for those employees who create and access data that needs the highest level of security. You should require 2SV for all other employees and encourage them to use security keys. Security keys offer the most secure form of 2SV. They are based on the open standard developed by Google as part of the Fast Identity Online (FIDO) Alliance. Security keys require a compatible browser on user devices.

Topics

#Hybrid Identity#Identity Federation (SAML)#Password Policy#Multi-Factor Authentication

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice