A company is migrating to Google Workspace and wants to enforce a password policy that requires a minimum length of 12 characters and prohibits reuse of the last 5 passwords. They also want to use SAML SSO with an external identity provider. The identity provider currently has a password policy that requires a minimum length of 8 characters and prohibits reuse of the last 3 passwords. What should the administrator do?

Configure the password policy in Google Workspace and rely on the IdP for authentication.

Disable SAML SSO and use Google Workspace passwords.

Update the identity provider's password policy to match the required policy.

Enforce the password policy in Google Workspace and require users to change their passwords in both systems.

An organization wants to require all users to use two-step verification (2SV) when signing in. Which policy setting should be enforced?

2-Step Verification enforcement

A company is implementing SAML SSO with an external identity provider. They want to enforce a password policy that requires a minimum length of 12 characters and expiration every 90 days. Where should the administrator configure this policy?

In the Google Admin console under Security > Password Management.

In the Google Workspace session control settings.

In the external identity provider's password policy settings.

In the Google Workspace SAML app settings.

When configuring an OAuth client, what is the primary purpose of the consent screen?

To configure the OAuth client's redirect URI

To authenticate the user with their password

To display the application's requested scopes and allow the user to approve or deny access

A security administrator wants to automatically sign out users from their Google Cloud session after 15 minutes of inactivity. Which session management setting should be configured?

Single sign-on (SSO) session controls

Google CloudProfessional Cloud Security Engineer

Domain 1Objective 3

1.3 Managing Authentication PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Part of the Configuring access domain, which accounts for 25% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

13questions here

3free pages

5concepts

25%of the exam

Questions 1–5

1expert · medium
A company is migrating to Google Workspace and wants to enforce a password policy that requires a minimum length of 12 characters and prohibits reuse of the last 5 passwords. They also want to use SAML SSO with an external identity provider. The identity provider currently has a password policy that requires a minimum length of 8 characters and prohibits reuse of the last 3 passwords. What should the administrator do?
Select an answer first
2foundation · easy
An organization wants to require all users to use two-step verification (2SV) when signing in. Which policy setting should be enforced?
Select an answer first
3application · medium
A company is implementing SAML SSO with an external identity provider. They want to enforce a password policy that requires a minimum length of 12 characters and expiration every 90 days. Where should the administrator configure this policy?
Select an answer first
4foundation · easy
When configuring an OAuth client, what is the primary purpose of the consent screen?
Select an answer first
5foundation · easy
A security administrator wants to automatically sign out users from their Google Cloud session after 15 minutes of inactivity. Which session management setting should be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.