You work for a large organization that is using Cloud Identity as the identity provider (IdP) on Google Cloud. Your InfoSec team has mandated the enforcement of a strong password with a length…

Question

Options

• AReview each user's password configuration and reset existing passwords.
• BReview the organization password management setting and select Enforce password policy at
• CReview each user's password configuration and select Enforce strong password.
• DReview the organization password management setting and select Enforce strong password.

• A
  10% (3)
• B
  83% (24)
• C
  3% (1)
• D
  3% (1)

Explanation

In Google Admin Console, configuring a password strength policy (minimum length, complexity) only applies to passwords set after the policy was configured. Existing user accounts with non-compliant passwords continue to work until their password is changed. To retroactively enforce the new policy, an administrator must select 'Enforce password policy at next sign-in' in the organization's password management settings. This forces all users whose current passwords do not meet the policy to create a new compliant password on their next login attempt. Option A resets individual passwords manually, which is impractical at scale. Option C sets 'Enforce strong password' per user, which is similarly manual and doesn't enforce minimum length. Option D enables 'Enforce strong password' at the org level but does not trigger immediate re-enrollment of existing non-compliant passwords.

No community discussion yet for this question.