GWS-ADMIN Security Policies And Access Controls Practice Question
Which TWO actions should an administrator take to secure administrative accounts against credential theft and unauthorized access? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enforce hardware security keys as the only allowed 2-Step Verification method for administrator accounts.
Securing admin accounts involves mandating strict 2SV methods and restricting admin access to known IPs or devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enforce hardware security keys as the only allowed 2-Step Verification method for administrator accounts.
Why this is correct
Hardware security keys provide phishing-resistant 2SV, making them ideal for securing high-privilege admin accounts.
- ✗
Enable SMS-based 2SV verification as a mandatory fallback for all admin accounts.
Why it's wrong here
SMS is vulnerable to SIM-swapping and interception, and should be avoided for admins.
- ✓
Configure Context-Aware Access to restrict administrator console access to corporate IP ranges or managed devices.
Why this is correct
Restricting admin console access to trusted networks or managed devices prevents remote attacker exploitation.
- ✗
Disable password expiration policies for all admin accounts to prevent administrative lockout.
Why it's wrong here
Disabling password rotation weakens security; admins should still follow robust password guidelines.
- ✗
Assign the 'Super Admin' role to all members of the IT helpdesk to ensure fast incident response.
Why it's wrong here
Granting Super Admin broadly violates the principle of least privilege.
About these practice questions
One of 208 original GWS-ADMIN practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Google Cloud exam blueprint
This GWS-ADMIN practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GWS-ADMIN exam.