Google Associate Cloud Engineer Question 104
Select 2Google Cloud PlatformAs a Google Cloud Certified Associate Cloud Engineer, you are tasked with ensuring that user access to your company's VM instances is managed through Google accounts rather than using SSH keys. You decide to enable OS Login. Which of the following steps should you take to configure OS Login for your VM instances?
- A
Enable OS Login in the Google Cloud Console under the 'IAM & Admin' section.
- B
Set the 'enable-oslogin' metadata key to 'TRUE' on the VM instances.
- C
Install the OS Login SDK on each VM instance.
- D
Ensure that your users have the requisite IAM roles for OS Login access.
- E
Disable all existing SSH keys for the VM instances.
Show answer and explanation
Correct answers: B, D
Explanation
To configure OS Login, you need to set the 'enable-oslogin' metadata key to 'TRUE' on the VM instances to activate OS Login. Additionally, appropriate IAM roles must be assigned to users to allow them to access the VM instances using their Google accounts. These steps ensure that access is managed through Google Cloud's IAM rather than SSH keys.
- A. Incorrect.
OS Login is not enabled through the 'IAM & Admin' section in the Google Cloud Console. It is configured through metadata and IAM roles.
- B. Correct.
Setting the 'enable-oslogin' metadata key to 'TRUE' on the VM instances is necessary to enable OS Login.
- C. Incorrect.
There is no need to install an OS Login SDK on the VM instances; OS Login is integrated into the metadata server.
- D. Correct.
Users must have the necessary IAM roles, such as 'roles/compute.osLogin' or 'roles/compute.osAdminLogin', to access VM instances using OS Login.
- E. Incorrect.
Disabling existing SSH keys is not required to enable OS Login. OS Login can work alongside existing SSH keys until you decide to remove the keys.