Google Associate Cloud Engineer Question 103
Select 2Google Cloud PlatformYou are managing a fleet of Compute Engine instances on Google Cloud Platform, and you want to configure OS Login to manage SSH access using IAM roles for your team. Which steps should you take to enable OS Login for all instances within a specific project?
- A
A. Enable the 'Enable OS Login' metadata key with the value 'TRUE' on each instance.
- B
B. Assign IAM roles 'roles/compute.osLogin' and 'roles/compute.osAdminLogin' to users at the project level.
- C
C. Set the 'Enable-OsLogin' metadata key at the project level to 'TRUE'.
- D
D. Add the OS Login-enabled users to the 'sshKeys' metadata key of each instance.
- E
E. Install the OS Login agent on each instance manually.
Show answer and explanation
Correct answers: B, C
Explanation
To enable OS Login for all instances within a project, you need to set the 'Enable-OsLogin' metadata key at the project level, ensuring all instances inherit this configuration. Additionally, you must assign appropriate IAM roles such as 'roles/compute.osLogin' and 'roles/compute.osAdminLogin' to users at the project level to manage SSH access via IAM, rather than relying on SSH keys.
- A. Incorrect.
A. While enabling OS Login on each instance is possible, configuring it at the project level is more efficient and scalable.
- B. Correct.
B. Assigning IAM roles 'roles/compute.osLogin' and 'roles/compute.osAdminLogin' at the project level grants users the necessary permissions to use OS Login.
- C. Correct.
C. Setting the 'Enable-OsLogin' metadata key at the project level ensures that all instances within the project have OS Login enabled by default.
- D. Incorrect.
D. OS Login replaces the need to manage SSH keys in instance metadata, so this step is not necessary.
- E. Incorrect.
E. OS Login is a feature provided by Google Cloud and does not require manual installation of an agent.