Your company is concerned about unauthorized parties gaining access to the Google Cloud environment by using a fake login page. You must implement a solution to protect against person-in-the-middle…

The correct answer is A. Security key. A security key (FIDO2/U2F hardware token) is the only listed option that is phishing-resistant and protects against person-in-the-middle attacks. When a user authenticates with a security key, the key cryptographically binds the authentication to the legitimate origin domain…

Submitted by mateo_ar· Apr 18, 2026Configuring access within a cloud solution environment

Question

Your company is concerned about unauthorized parties gaining access to the Google Cloud environment by using a fake login page. You must implement a solution to protect against person-in-the-middle attacks. Which security measure should you use?

Options

ASecurity key
BGoogle prompt
CText message or phone call code
DGoogle Authenticator application

How the community answered

(18 responses)

A
72% (13)
B
11% (2)
C
17% (3)

Explanation

A security key (FIDO2/U2F hardware token) is the only listed option that is phishing-resistant and protects against person-in-the-middle attacks. When a user authenticates with a security key, the key cryptographically binds the authentication to the legitimate origin domain. Even if a user is deceived by a fake login page, the security key will refuse to authenticate because the domain does not match the registered origin - the attacker receives nothing usable. The other options (Google prompt, SMS/call codes, and TOTP from Google Authenticator) all produce one-time credentials that an attacker can silently relay to the real site in real time, which is the exact attack vector of a MITM phishing scenario.

Topics

#Multi-factor authentication (MFA)#Phishing protection#Man-in-the-middle (MITM) attacks#Security keys

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice