The security team has disabled external SSH access into production virtual machines in GCP. The operations team needs to remotely manage the VMs and other resources. What can they do?

Question

Options

• ADevelop a new access request process that grants temporary SSH access to cloud VMs when an
• BGrant the operations team access to use Google Cloud Shell.
• CHave the development team build an API service that allows the operations team to execute
• DConfigure a VPN connection to GCP to allow SSH access to the cloud VMs.

• A
  4% (1)
• B
  70% (16)
• C
  17% (4)
• D
  9% (2)

Explanation

Google Cloud Shell is a browser-based, fully managed shell environment with the gcloud CLI and other tools pre-installed. It connects to GCP resources through Google's internal network via Identity-Aware Proxy (IAP) tunneling - not through a traditional external SSH port - so it works even when external SSH (port 22) is blocked by firewall rules. Operations teams can SSH into VMs and manage resources entirely from the Cloud Console without needing an external IP or open SSH firewall rule. Option A (temporary SSH access process) is operationally complex and the question asks what can be done with the current setup. Option C (building an API service) introduces unnecessary engineering overhead. Option D (VPN) would enable network-level access but SSH is still disabled at the firewall layer, so VPN alone does not solve the problem.

No community discussion yet for this question.