GCP Cloud Digital Leader Practice Question

To minimize the chance that a stolen password alone can be used to access Google Cloud resources, what specific security benefit is provided when an organization enforces two-step verification for all IAM users?

It requires a second authentication factor, so a stolen password alone cannot grant access.
It encrypts all Cloud Storage data with customer-managed keys by default.
It places user credentials on a private network segment isolated from the internet.
It automatically removes unused IAM roles after a predefined period.

Report Issue

Answer Description

Two-step verification (2SV) adds a second authentication factor-such as a hardware security key, code, or prompt-to the standard username-and-password login. Because an attacker would need both the password and the additional factor, compromising only the password no longer grants access. The other options describe security capabilities that 2SV does not automatically deliver: it does not schedule automatic permission clean-ups, does not default every Cloud Storage object to customer-managed encryption keys, and does not place credentials on an isolated private network.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.

What are common examples of a second authentication factor in two-step verification (2SV)?

Open an interactive chat with Bash

How does two-step verification improve security for IAM users in Google Cloud?

Open an interactive chat with Bash

What is the difference between two-step verification (2SV) and multi-factor authentication (MFA)?

Open an interactive chat with Bash

What is the purpose of two-step verification (2SV) in Google Cloud IAM?

Open an interactive chat with Bash

What types of two-step verification methods are commonly used?

Open an interactive chat with Bash

Why can't two-step verification alone replace the need for IAM role management?

Open an interactive chat with Bash

GCP Cloud Digital Leader

Trust and Security with Google Cloud

Your Score:

Settings & Objectives

Digital Transformation with Google Cloud

Exploring Data Transformation with Google Cloud

Innovating with Google Cloud Artificial Intelligence

Modernize Infrastructure and Applications with Google Cloud

Trust and Security with Google Cloud

Scaling with Google Cloud Operations

Random Mixed

Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.

Rotate by Objective

Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Hide Score

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot

AI Bot