PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #247
You are migrating your users to Google Cloud. There are cookie replay attacks with Google web and Google Cloud CLI SDK sessions on endpoint devices. You need to reduce the risk of these threats…
The correct answer is A. Configure Google session control to a shorter duration. E. Enforce Security Key Authentication with 2SV. Configuring Google session control to a shorter duration reduces the time window in which an attacker can use a replayed cookie to gain unauthorized access, thereby enhancing security. Enforcing Security Key Authentication with 2-Step Verification (2SV) adds an additional layer…
Question
Options
- AConfigure Google session control to a shorter duration.
- BSet an organizational policy for OAuth 2.0 access token with a shorter duration.
- CSet a reauthentication policy for Google Cloud services to a shorter duration.
- DConfigure a third-party identity provider with session management.
- EEnforce Security Key Authentication with 2SV.
How the community answered
(42 responses)- A71% (30)
- B10% (4)
- C5% (2)
- D14% (6)
Explanation
Configuring Google session control to a shorter duration reduces the time window in which an attacker can use a replayed cookie to gain unauthorized access, thereby enhancing security. Enforcing Security Key Authentication with 2-Step Verification (2SV) adds an additional layer of security by requiring users to verify their identity using a physical security key, making it more difficult for attackers to gain unauthorized access even if they have a replayed cookie.
Topics
Community Discussion
No community discussion yet for this question.