nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #370

Your company's developers use an automation that you recently built to provision Linux VMs in Compute Engine within a Google Cloud project to perform various tasks. You need to manage the Linux accoun

The correct answer is A. Enable OS Login for all VMs. Use IAM roles to grant user permissions.. Enabling OS Login for all VMs and using IAM roles to grant user permissions is the best solution. OS Login integrates with Google Cloud IAM to manage access to Compute Engine instances, providing centralized, role-based access control for Linux accounts. This approach follows Goo

Submitted by neha2k· Mar 30, 2026Configuring access and security

Question

Your company's developers use an automation that you recently built to provision Linux VMs in Compute Engine within a Google Cloud project to perform various tasks. You need to manage the Linux account lifecycle and access for these users. You want to follow Google-recommended practices to simplify access management while minimizing operational costs. What should you do?

Options

  • AEnable OS Login for all VMs. Use IAM roles to grant user permissions.
  • BEnable OS Login for all VMs. Write custom startup scripts to update user permissions.
  • CRequire your developers to create public SSH keys. Make the owner of the public key the root
  • DRequire your developers to create public SSH keys. Write custom startup scripts to update user

How the community answered

(29 responses)
  • A
    90% (26)
  • B
    7% (2)
  • D
    3% (1)

Explanation

Enabling OS Login for all VMs and using IAM roles to grant user permissions is the best solution. OS Login integrates with Google Cloud IAM to manage access to Compute Engine instances, providing centralized, role-based access control for Linux accounts. This approach follows Google-recommended practices for simplifying user access management while minimizing operational overhead.

Topics

#OS Login#IAM roles#SSH access management#Linux VM lifecycle

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice