You are implementing a company-wide standard to control SSH access for your Google Cloud projects. You want to simplify SSH access management to your Compute Engine instances while maintaining audit…

The correct answer is C. Enable OS Login by using an organization policy for each Google Cloud project. OS Login centralizes SSH access management by using IAM roles instead of manually managed SSH keys. It simplifies and standardizes access across all Compute Engine instances. Applying OS Login via an organization policy ensures consistent enforcement across all projects…

Submitted by ricky.ec· Mar 30, 2026Configuring access and security

Question

You are implementing a company-wide standard to control SSH access for your Google Cloud projects. You want to simplify SSH access management to your Compute Engine instances while maintaining audit compliance and eliminating as many manual steps as possible. What should you do?

Options

AConfigure a service account to add SSH keys for all VMs.
BConfigure metadata SSH keys to manage access to instances.
CEnable OS Login by using an organization policy for each Google Cloud project.
DEnable OS Login with two-factor authentication for the domain.

How the community answered

(46 responses)

A
2% (1)
B
4% (2)
C
91% (42)
D
2% (1)

Explanation

OS Login centralizes SSH access management by using IAM roles instead of manually managed SSH keys. It simplifies and standardizes access across all Compute Engine instances. Applying OS Login via an organization policy ensures consistent enforcement across all projects, reducing manual configuration and enhancing audit compliance. This approach allows fine-grained control, logging, and the use of identity-based access without needing to distribute or rotate SSH keys

Topics

#OS Login#organization policy#SSH management#Compute Engine

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice