After completing a security vulnerability assessment, you learned that cloud administrators leave Google Cloud CLI sessions open for days. You need to reduce the risk of attackers who might exploit…

Question

Options

• ASet the session duration for the Google session control to one hour.
• BSet the reauthentication frequency for the Google Cloud Session Control to one hour.
• CSet the organization policy constraint
• DSet the organization policy constraint constraints/iam.serviceAccountKeyExpiryHours to one hour

• A
  6% (2)
• B
  76% (25)
• C
  15% (5)
• D
  3% (1)

Explanation

Google Cloud Session Control allows Google Workspace administrators to set reauthentication policies for access to Google Cloud resources. Setting the reauthentication frequency forces users to re-authenticate after a specified interval (e.g., one hour), which directly mitigates the risk of an attacker exploiting an idle, long-running CLI session. Option A refers to 'session duration' which is a different concept; session control works via reauthentication frequency, not a hard session cut-off. Options C and D refer to org policy constraints related to service account key expiry - these are unrelated to interactive CLI session management and address a different risk (long-lived service account keys, not user sessions).

No community discussion yet for this question.