Which method can NOT be used by Google Workspace administrators to enforce second factor authentication (2SV) for users?

• A. Enroll users in 2SV automatically
• B. Send individual verification codes
• C. Require users to set up 2SV within user settings
• D. Disable access based on 2SV compliance

Answer: (B)

The correct choice demonstrates an effective understanding of how Google Workspace administrators can enforce second factor authentication (2SV) for their users. Administrators have various tools and capabilities at their disposal to manage 2SV, but sending individual verification codes does not fit within these methods.

When enforcing 2SV, administrators can automatically enroll users, requiring them to set up authentication through their own settings, and can even disable access for those not compliant with existing policies. However, sending individual verification codes means that the responsibility for authentication lies with the individual user rather than being a systematic approach to enforcing security policies across the organization. Individual verification codes are typically generated and received by users at the time of login, but they do not serve as a method for administrators to enforce compliance with 2SV.

Therefore, this choice highlights the distinction between user-driven actions and organizational policy enforcement, making it clear that while some methods can ensure 2SV is set up and maintained, directly sending individual codes does not support enforcement by administrators.