ASSOCIATE-CLOUD-ENGINEER Question #392: Real Exam Question with Answer & Explanation

Question

You are managing a fleet of Compute Engine Linux instances in a Google Cloud project. Your company's engineering team requires SSH access to all instances to perform routine maintenance tasks. You need to manage the SSH access for the engineering team, and you want to minimize operational overhead when engineers join or leave the team. What should you do?

Options

• ACreate a single SSH key pair to be shared by all engineering team members. Add the public SSH
• BCreate an SSH key pair for each engineer on the team, and add the public SSH key to the
• CCreate a Google Group for all engineering team members, and grant them the Compute Viewer
• DCreate a Google Group for all engineering team members, and set up OS Login for this group on

Explanation

OS Login and Google Groups Integration: OS Login is a Google-recommended best practice for managing SSH access to Compute Engine instances. It ties SSH access to IAM roles and user identities, allowing you to centrally manage permissions. By setting up OS Login for a Google Group, you can easily grant or revoke SSH access to all instances for team members simply by managing group membership. This greatly reduces operational overhead when engineers join or leave the team.

No community discussion yet for this question.