nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #99

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the de

The correct answer is A. Set metadata to for the instance. Grant the dev1 group the. You can grant roles/compute.osLogin instance access roles at the instance level by using the gcloud compute instances add-iam-policy-binding command. https://cloud.google.com/compute/docs/instances/managing-instance-access#grant-iam-roles

Submitted by fernanda_arg· Mar 30, 2026Configuring access and security

Question

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

Options

  • ASet metadata to for the instance. Grant the dev1 group the
  • BSet metadata to enable-oslogin=true for the instance. Set the service account to no
  • CEnable block project wide keys for the instance. Generate an SSH key for each user in
  • DEnable block project wide keys for the instance. Generate an SSH key and associate the

How the community answered

(34 responses)
  • A
    74% (25)
  • B
    6% (2)
  • C
    18% (6)
  • D
    3% (1)

Explanation

You can grant roles/compute.osLogin instance access roles at the instance level by using the gcloud compute instances add-iam-policy-binding command. https://cloud.google.com/compute/docs/instances/managing-instance-access#grant-iam-roles

Topics

#OS Login#SSH access#instance metadata#IAM instance-level

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice