You are in charge of creating a new Google Cloud organization for your company. Which two actions should you take when creating the super administrator accounts? (Choose two.)

The correct answer is C. Use a physical token to secure the super admin credentials with multi-factor authentication E. Provide non-privileged identities to the super admin users for their day-to-day activities. https://cloud.google.com/resource-manager/docs/super-admin-best- practices#discourage_super_admin_account_usage - Use a security key or other physical authentication device to enforce two-step verification - Give super admins a separate account that requires a separate login

Submitted by kavita_s· Apr 18, 2026Configuring access within a cloud solution environment

Question

You are in charge of creating a new Google Cloud organization for your company. Which two actions should you take when creating the super administrator accounts? (Choose two.)

Options

ACreate an access level in the Google Admin console to prevent super admin from logging in to
BDisable any Identity and Access Management (IAM) roles for super admin at the organization
CUse a physical token to secure the super admin credentials with multi-factor authentication
DUse a private connection to create the super admin accounts to avoid sending your credentials
EProvide non-privileged identities to the super admin users for their day-to-day activities.

How the community answered

(44 responses)

A
5% (2)
B
11% (5)
C
82% (36)
D
2% (1)

Explanation

https://cloud.google.com/resource-manager/docs/super-admin-best- practices#discourage_super_admin_account_usage - Use a security key or other physical authentication device to enforce two-step verification - Give super admins a separate account that requires a separate login

Topics

#Super Administrator Accounts#Multi-Factor Authentication (MFA)#Least Privilege Principle#Organization Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice