Exam Associate Cloud Engineer topic 1 question 191 discussion

B is correct as question say no public IP on the instance.

Absolutely B https://cloud.google.com/iap/docs/using-tcp-forwarding#tunneling_ssh_connections

Answer B https://cloud.google.com/blog/products/identity-security/cloud-iap-enables-context-aware-access-to-vms-via-ssh-and-rdp-without-bastion-hosts

B - Cloud Identity-Aware Proxy (IAP) allows you to set up secure access to your VM instances without the need to expose them to the public internet. By using IAP for SSH and TCP resources, you can manage access to the instances through a central point (IAP), which serves as a secure way to access your resources without the need for public IP addresses. IAP allows you to set up access controls based on user identities and their permissions, rather than relying on specific IP addresses or public keys configured on individual instances. This streamlines access management and enhances security, providing centralized control over SSH access to your Compute Engine instances.

B is correct

b is right

B looks right

B is correct, With TCP forwarding, IAP can protect SSH and RDP access to your VMs hosted on Google Cloud. Your VM instances don't even need public IP addresses.

B is correct

I think it is B https://medium.com/google-cloud/how-to-ssh-into-your-gce-machine-without-a-public-ip-4d78bd23309e

B is correct as it uses IAP

IAP lets you establish a central authorization layer for applications accessed by HTTPS. This statement immediately eliminates A & B since you would need to publicly access the instance. C is also incorrect because it uses a private SSH key. Private keys are only meant for the user themselves as proof of their identity. Public SSH keys are meant to be used for access within applications, so that is the most applicable in this case. D, final answer.

IAP lets you establish a central authorization layer for applications accessed by HTTPS. This statement immediately eliminates A & B since you would need to publicly access the instance. C is also incorrect because it uses a private SSH key. Private keys are only meant for the user themselves as proof of their identity. Public SSH keys are meant to be used for access within applications, so that is the most applicable in this case. D, final answer.

C looks better