Google
PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #244
You have numerous private virtual machines on Google Cloud. You occasionally need to manage the servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote access…
The correct answer is C. Create a firewall rule to allow access from the Identity-Aware Proxy (IAP) IP range. Grant the role. With TCP forwarding, IAP can protect SSH and RDP access to your VMs hosted on Google Cloud. Your VM instances don't even need public IP addresses. https://cloud.google.com/iap#section-2
Submitted by klara.se· Apr 18, 2026Configuring access within a cloud solution environment
Question
You have numerous private virtual machines on Google Cloud. You occasionally need to manage the servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote access to the servers in a manner that optimizes security and cost efficiency. What should you do?
Options
- ACreate a site-to-site VPN from your corporate network to Google Cloud.
- BConfigure server instances with public IP addresses. Create a firewall rule to only allow traffic
- CCreate a firewall rule to allow access from the Identity-Aware Proxy (IAP) IP range. Grant the role
- DCreate a jump host instance with public IP. Manage the instances by connecting through the jump
How the community answered
(37 responses)- A11% (4)
- B5% (2)
- C81% (30)
- D3% (1)
Explanation
With TCP forwarding, IAP can protect SSH and RDP access to your VMs hosted on Google Cloud. Your VM instances don't even need public IP addresses. https://cloud.google.com/iap#section-2
Topics
#Identity-Aware Proxy (IAP)#SSH Access#Private VMs#Network Security
Community Discussion
No community discussion yet for this question.