Google Associate Cloud Engineer Question 102
Select 3Google Cloud PlatformYou are a Google Cloud Engineer tasked with ensuring secure and centralized management of SSH access to your organization's Compute Engine instances. You have decided to use OS Login. What steps should you take to enable OS Login on your instances?
- A
A) Enable OS Login in the project metadata settings.
- B
B) Enable OS Login in the instance metadata settings.
- C
C) Assign the roles/compute.osLogin role to users or groups in IAM.
- D
D) Configure a startup script to enable OS Login on each instance.
- E
E) Ensure that your users have Google accounts with enabled 2-step verification.
Show answer and explanation
Correct answers: A, B, C
Explanation
To enable OS Login on Google Cloud instances, you need to modify metadata settings either at the project or instance level. This allows you to control SSH access centrally. Additionally, users or groups must have the appropriate IAM role (roles/compute.osLogin) to use OS Login, which facilitates centralized management of SSH keys. Startup scripts and 2-step verification, while valuable in other contexts, are not directly related to enabling OS Login.
- A. Correct.
A) Correct. Enabling OS Login at the project metadata level applies it to all instances within the project.
- B. Correct.
B) Correct. Enabling OS Login at the instance metadata level allows for more granular control on a per-instance basis.
- C. Correct.
C) Correct. Assigning roles/compute.osLogin in IAM is necessary to grant users the permissions required for OS Login.
- D. Incorrect.
D) Incorrect. While startup scripts can configure many instance settings, enabling OS Login is done through metadata.
- E. Incorrect.
E) Incorrect. While 2-step verification is beneficial for security, it is not required specifically for enabling OS Login.