Google
ASSOCIATE-CLOUD-ENGINEER · Question #225
You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over m
The correct answer is B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources.. Use IAP TCP to enable access to VM instances that do not have external IP addresses or do not permit direct access over the internet. https://cloud.google.com/iap/docs/using-tcp-forwarding
Submitted by mateo_ar· Mar 30, 2026Configuring access and security
Question
You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over me Internet without having to configure specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What should you do?
Options
- AConfigure Cloud Identity-Aware Proxy (or HTTPS resources
- BConfigure Cloud Identity-Aware Proxy for SSH and TCP resources.
- CCreate an SSH keypair and store the public key as a project-wide SSH Key
- DCreate an SSH keypair and store the private key as a project-wide SSH Key
How the community answered
(59 responses)- A3% (2)
- B76% (45)
- C7% (4)
- D14% (8)
Explanation
Use IAP TCP to enable access to VM instances that do not have external IP addresses or do not permit direct access over the internet. https://cloud.google.com/iap/docs/using-tcp-forwarding
Topics
#Cloud IAP#SSH access#private IP#Compute Engine
Community Discussion
No community discussion yet for this question.