Question 117 of 318
Single answerYou are a member of your company's security team. You have been asked to reduce your Linux bastion host external attack surface by removing all public IP addresses. Site Reliability Engineers (SREs) require access to the bastion host from public locations so they can access the internal VPC while off-site. How should you enable this access?
AImplement Cloud VPN for the region where the bastion host lives.
BImplement OS Login with 2-step verification for the bastion host.
✓CImplement Identity-Aware Proxy TCP forwarding for the bastion host.
DImplement Google Cloud Armor in front of the bastion host.
✓
Correct Answer: C
Implement Identity-Aware Proxy TCP forwarding for the bastion host.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.