Google Cloud Professional Cloud Architect PCA — Topic 1 Question 133

Question

You have deployed several instances on Compute Engine. As a security requirement, instances cannot have a public IP address. There is no VPN connection between Google Cloud and your office, and you need to connect via SSH into a specific machine without violating the security requirements. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Configure Identity-Aware Proxy (IAP) for the instance and ensure that you have the role of IAP-secured Tunnel User. Use the gcloud command line tool to ssh into the instance. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Architect PCA — Question 133