Google Associate Cloud Engineer Question 174
Select 4Google Cloud PlatformYou are a Google Cloud Engineer tasked with setting up a secure remote connection to a newly created Compute Engine instance. The instance does not have a public IP address for security reasons. Which of the following methods can you use to connect to the instance?
- A
Use the Google Cloud Console's SSH-in-browser feature.
- B
Set up a VPN connection to the VPC network where the instance is located.
- C
Enable IAP (Identity-Aware Proxy) tunneling and connect through IAP.
- D
Assign a temporary public IP address and connect via SSH.
- E
Use a bastion host with a public IP to SSH into the instance.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To connect to Compute Engine instances without a public IP, you can use methods such as SSH-in-browser, VPN, IAP tunneling, or a bastion host. These methods ensure secure, private access without exposing the instance directly to the internet.
- A. Correct.
The Google Cloud Console's SSH-in-browser feature uses the Cloud Shell and does not require the instance to have a public IP.
- B. Correct.
A VPN connection allows you to securely access resources in a private VPC network without the need for public IPs.
- C. Correct.
IAP (Identity-Aware Proxy) allows you to securely access instances without needing a public IP or VPN.
- D. Incorrect.
Assigning a temporary public IP address is not recommended when the instance is intended to remain private.
- E. Correct.
A bastion host provides a secure access point from which you can SSH into other instances in a private network.