Google Cloud Professional Cloud Network Engineer — Question 23

All the instances in your project are configured with the custom metadata enable-oslogin value set to FALSE and to block project-wide SSH keys. None of the instances are set with any SSH key, and no project-wide SSH keys have been configured. Firewall rules are set up to allow SSH sessions from any IP address range. You want to SSH into one instance.
What should you do?

Answer options

• A. Open the Cloud Shell SSH into the instance using gcloud compute ssh.
• B. Set the custom metadata enable-oslogin to TRUE, and SSH into the instance using a third-party tool like putty or ssh.
• C. Generate a new SSH key pair. Verify the format of the private key and add it to the instance. SSH into the instance using a third-party tool like putty or ssh.
• D. Generate a new SSH key pair. Verify the format of the public key and add it to the project. SSH into the instance using a third-party tool like putty or ssh.

Correct answer: A

Explanation

The correct answer is A because using Cloud Shell with gcloud compute ssh does not require SSH keys to be configured on the instance. Options B, C, and D involve changing settings or generating keys, which won't work since the instances are set to block SSH keys and have osLogin disabled.