Google Cloud Associate Cloud Engineer — Question 171

You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over the internet without having to configure specific access on the existing and new instances. You do not want the
Compute Engine instances to have a public IP. What should you do?

Answer options

• A. Configure Cloud Identity-Aware Proxy for HTTPS resources.
• B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources
• C. Create an SSH keypair and store the public key as a project-wide SSH Key.
• D. Create an SSH keypair and store the private key as a project-wide SSH Key.

Correct answer: B

Explanation

The correct answer is B because configuring Cloud Identity-Aware Proxy for SSH and TCP resources allows you to access your instances securely without needing public IPs. Options A and C do not address SSH access for the instances, while D incorrectly suggests storing the private key as a project-wide SSH Key, which is not a secure practice.