Question 209 of 284
Single answerYour team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?
AAttach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.
✓BUse the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
CUse a third party tool to provide remote access to the instances.
DCreate a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.
✓
Correct Answer: B
Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.