nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #247

You are migrating your users to Google Cloud. There are cookie replay attacks with Google web and Google Cloud CLI SDK sessions on endpoint devices. You need to reduce the risk of these threats…

The correct answer is A. Configure Google session control to a shorter duration. E. Enforce Security Key Authentication with 2SV. Configuring Google session control to a shorter duration reduces the time window in which an attacker can use a replayed cookie to gain unauthorized access, thereby enhancing security. Enforcing Security Key Authentication with 2-Step Verification (2SV) adds an additional layer…

Submitted by paula_co· Apr 18, 2026Configuring access within a cloud solution environment

Question

You are migrating your users to Google Cloud. There are cookie replay attacks with Google web and Google Cloud CLI SDK sessions on endpoint devices. You need to reduce the risk of these threats. What should you do? (Choose two.)

Options

  • AConfigure Google session control to a shorter duration.
  • BSet an organizational policy for OAuth 2.0 access token with a shorter duration.
  • CSet a reauthentication policy for Google Cloud services to a shorter duration.
  • DConfigure a third-party identity provider with session management.
  • EEnforce Security Key Authentication with 2SV.

How the community answered

(42 responses)
  • A
    71% (30)
  • B
    10% (4)
  • C
    5% (2)
  • D
    14% (6)

Explanation

Configuring Google session control to a shorter duration reduces the time window in which an attacker can use a replayed cookie to gain unauthorized access, thereby enhancing security. Enforcing Security Key Authentication with 2-Step Verification (2SV) adds an additional layer of security by requiring users to verify their identity using a physical security key, making it more difficult for attackers to gain unauthorized access even if they have a replayed cookie.

Topics

#Session Management#Authentication#Security Keys#Cookie Replay Attack

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice