Google Associate Cloud Engineer Question 171
Select 3Google Cloud PlatformYou are a Google Cloud Engineer tasked with setting up secure remote access to a Compute Engine instance using SSH. Which of the following steps should you take to ensure you can connect to the instance without encountering permission issues?
- A
Ensure that the firewall rules allow ingress traffic on port 22.
- B
Add your public SSH key to the instance's metadata.
- C
Use the 'gcloud compute ssh' command with the '--zone' flag to specify the instance's zone.
- D
Create a VPN tunnel to the VPC network where the instance is located.
- E
Assign a public IP address to the instance for direct SSH access.
Show answer and explanation
Correct answers: A, B, C
Explanation
To securely connect to a Compute Engine instance via SSH, you must ensure that the network allows traffic on port 22, the SSH key is correctly configured in metadata, and you specify the correct zone when using gcloud commands. These steps help prevent common connectivity issues and ensure secure access. Assigning a public IP can be helpful but is not necessary if other secure access methods are employed.
- A. Correct.
Ensuring that the firewall rules allow ingress traffic on port 22 is necessary for SSH access to the instance.
- B. Correct.
Adding your public SSH key to the instance's metadata allows you to authenticate via SSH without being prompted for a password.
- C. Correct.
Using the 'gcloud compute ssh' command with the '--zone' flag is necessary to specify the correct instance location and ensure the command targets the right instance.
- D. Incorrect.
Creating a VPN tunnel is not required for SSH access unless there are additional network restrictions in place.
- E. Incorrect.
Assigning a public IP address is not strictly necessary if alternative methods like IAP (Identity-Aware Proxy) or bastion hosts are used for secure access.