Google Professional Cloud DevOps Engineer Question 203
Select 2Google Cloud PlatformYour team is adopting Cloud Workstations to standardize development environments for all developers. You are tasked with configuring a workstation template to meet the following requirements:
- Developers should use a pre-configured development environment with Python and Node.js.
- The development environment must be isolated from the public internet for security purposes.
- Developers should be able to access their workstations using a browser without requiring additional VPN setup.
Which steps should you take to configure the Cloud Workstation template to meet these requirements?
- A
Install Python and Node.js in the workstation image using a custom Dockerfile.
- B
Configure a private endpoint for the workstation and enable Identity-Aware Proxy (IAP) for secure access.
- C
Allow public internet access to the workstation and configure a firewall rule to restrict access to specific IP ranges.
- D
Use a pre-configured Google-provided image that includes Python and Node.js.
- E
Enable secure access to the workstation using SSH keys and disable browser-based access.
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements, you need to configure a Cloud Workstation template with Python and Node.js by using a custom Dockerfile to ensure a pre-configured environment. Additionally, configuring a private endpoint and enabling Identity-Aware Proxy ensures the workstation is isolated from the public internet while still allowing secure browser-based access.
- A. Correct.
Correct: Using a custom Dockerfile allows you to pre-configure the development environment with Python and Node.js, meeting the requirement for a consistent setup.
- B. Correct.
Correct: Configuring a private endpoint and enabling IAP ensures that the workstation is isolated from the public internet while still allowing secure browser-based access.
- C. Incorrect.
Incorrect: Allowing public internet access contradicts the requirement for isolation from the public internet, even if restricted to specific IP ranges.
- D. Incorrect.
Incorrect: While Google-provided images may include some tools, they may not have both Python and Node.js pre-installed and do not meet the requirement for a fully customized environment.
- E. Incorrect.
Incorrect: Disabling browser-based access and relying solely on SSH does not meet the requirement for browser-based workstation access.