Practice Test 2 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
The security team has disabled external SSH access into production virtual machines in GCP. The operations team needs to remotely manage the VMs and other resources. What can they do?
A. Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
B. Grant the operations team access to use Google Cloud Shell.
C. Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
D. Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
Correct Answer D
Option D – Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
The questions tell that the “blocking” happens on GCP, especially in production environments. That means that there are firewall rules preventing access from public IPs on port 22. Therefore, using a VPN and configuring a firewall that allows TCP connections from RFC1918 on port 22, would work best. In this case, answer D is better.
Option B – SSH access will not allow access if Port 22 is blocked.
Options A and C are possible options that might require more setup than worthwhile for the needs.
Comments are closed, but trackbacks and pingbacks are open.