nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #78

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to t

The correct answer is C. Ask each member of the team to generate a new SSH key pair and to add the public key to their. We recommend collecting users with the same responsibilities into groups and assigning IAM roles to the groups rather than to individual users. For example, you can create a "data scientist" group and assign appropriate roles to enable interaction with BigQuery and Cloud Storage.

Submitted by tyler.j· Mar 30, 2026Configuring access and security

Question

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

Options

  • AGenerate a new SSH key pair. Give the private key to each member of your team.
  • BAsk each member of the team to generate a new SSH key pair and to send you their public key.
  • CAsk each member of the team to generate a new SSH key pair and to add the public key to their
  • DGenerate a new SSH key pair. Give the private key to each member of your team.

How the community answered

(44 responses)
  • A
    11% (5)
  • B
    7% (3)
  • C
    80% (35)
  • D
    2% (1)

Explanation

We recommend collecting users with the same responsibilities into groups and assigning IAM roles to the groups rather than to individual users. For example, you can create a "data scientist" group and assign appropriate roles to enable interaction with BigQuery and Cloud Storage. When a new data scientist joins your team, you can simply add them to the group and they will inherit the defined permissions. You can create and manage groups through the Admin Console. https://cloud.google.com/compute/docs/instances/managing-instance-access

Topics

#SSH keys#Compute Engine#access management#audit logging

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice