G Professional Collaboration Engineer Practice Exam

What should you do to protect highly sensitive user accounts from unauthorized access?

1. Turn on password expiration.

2. Enforce 2FA with a physical security key.

3. Use a third-party identity provider.

4. Enforce 2FA with Google Authenticator app.

The correct answer is: Enforce 2FA with a physical security key.

Enforcing two-factor authentication (2FA) with a physical security key is a highly effective method for protecting sensitive user accounts from unauthorized access. A physical security key, such as a USB or NFC-based device, adds an extra layer of security by requiring the user to have something tangible in addition to their password. This means that even if an attacker were to obtain the user’s password, they would still be unable to access the account without the physical key. Physical security keys use strong cryptographic methods to verify the identity of the user and prevent phishing attacks, which can often compromise accounts even when 2FA is in place if the second factor is software-based, like an app or SMS. The combination of something you know (the password) and something you have (the physical security key) creates a much more secure authentication process, making it extremely difficult for unauthorized users to gain access. In contrast, other methods like password expiration, while useful, do not provide the same level of security because they focus mainly on updating passwords rather than offering a second factor of authentication. Using a third-party identity provider can also add security but might not specifically enforce the strongest 2FA methods. The option of enforcing 2FA with the Google Authenticator app offers some