Question

A financial services company using Google Cloud is concerned that employee credentials could be stolen through phishing attacks that trick users into entering passwords and one-time codes on fake login pages. They want a phishing-resistant multi-factor authentication method for their administrators. Which Google solution best addresses this requirement?

Accepted Answer

Require Titan Security Keys, which use FIDO/hardware-based authentication resistant to phishing

Answer

Enforce SMS-based one-time passcodes for all administrator logins

Answer

Enable Access Transparency logs to record all administrator sign-in events

Answer

Apply VPC Service Controls to restrict which networks administrators can log in from