Your company is concerned about unauthorized access to the Google Cloud environment via phishing pages that mimic the login. You need to implement a solution to protect against man-in-the-middle attacks.

Which security measure should you use?