Google Cloud Professional Cloud Security Engineer Practice Exam

How can you prevent unauthorized access from unattended employee laptops in Google Cloud?

1. Set multi-factor authentication requirements

2. Set the session length timeout for Google Cloud services

3. Use device management policies

4. Implement a device lockout feature

The correct answer is: Set the session length timeout for Google Cloud services

Setting the session length timeout for Google Cloud services is an effective way to prevent unauthorized access from unattended employee laptops. By configuring shorter session timeouts, you ensure that if a user leaves their laptop inactive for a specified period, their session will automatically log out. This reduces the risk of someone else gaining access to the logged-in state of the user’s account and sensitive information. Shorter timeout settings encourage employees to lock their screens or log out when stepping away from their devices. This measure can be particularly important in environments where employees might leave their laptops unattended in common areas or shared spaces, increasing exposure to unauthorized access. While other options like multi-factor authentication, device management policies, and device lockout features also contribute to security in various contexts, they do not directly address the scenario of unattended laptops in the same manner that session timeout settings do. Device management can help enforce compliance, and multi-factor authentication strengthens access control, but session timeouts specifically tackle the issue of inactive sessions.