Google Cloud Professional Cloud Security Engineer — Question 279

You are in charge of creating a new Google Cloud organization for your company. Which two actions should you take when creating the super administrator accounts? (Choose two.)

Answer options

• A. Create an access level in the Google Admin console to prevent super admin from logging in to Google Cloud.
• B. Disable any Identity and Access Management (IAM) roles for super admin at the organization level in the Google Cloud Console.
• C. Use a physical token to secure the super admin credentials with multi-factor authentication (MFA).
• D. Use a private connection to create the super admin accounts to avoid sending your credentials over the Internet.
• E. Provide non-privileged identities to the super admin users for their day-to-day activities.

Correct answer: C, E

Explanation

Option C is correct because using a physical token for multi-factor authentication (MFA) significantly enhances the security of super admin accounts. Option E is also correct as it suggests providing non-privileged identities for everyday activities, reducing the risk of exposure. Options A and B are incorrect as they unnecessarily restrict super admin capabilities, while option D does not address the necessary security measures for account creation.