Question 152 of 284
Single answerYour company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google
Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?
✓AEnable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
BTag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
CSet up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
DAsk the operations partner to generate SSH key pairs, and add the public keys to the VM instances.
✓
Correct Answer: A
Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.