Google Cloud Associate Cloud Engineer — Question 130

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google
Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

Answer options

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• C. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• D. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Correct answer: D

Explanation

The correct answer is D because generating SSH key pairs allows secure access to the instances without needing Google Accounts. Options A and B do not provide access without Google Accounts, while C requires additional infrastructure setup that may not be necessary for simple access.