Question 11

Question

You have numerous private virtual machines on Google Cloud. You occasionally need to manage the
servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote
access to the servers in a manner that optimizes security and cost efficiency.
What should you do?

Accepted Answer

Create a firewall rule to allow access from the Identity-Aware Proxy (IAP) IP range Grant the role of
an IAP- secured Tunnel User to the administrators.

Mason S. · Answer

It’s C. Would the answer change if the requirement was to enable access from anywhere, not just your corporate network?

Owen O. · Answer

Definitely C. You get secure SSH using IAP without public IPs, so no need for a jump box or VPN setup. Pretty sure this is the most cost-effective and secure method Google recommends. Let me know if you see a downside.

Daniel N. · Answer

Similar scenario shows up in the official guide and lab exercises, always points to C for secure remote management on Google Cloud.

KevinP · Answer

Call it C is the best fit here since it uses IAP, so you don't have to expose any public IPs or set up a jump host. Keeping SSH locked down and handled via identity-based access controls is way safer and cheaper long term. I saw a similar question come up in some recent practice sets too. Anyone think there's a real advantage to D over C for this scenario?

Google Professional Cloud Security Engineer Real Exam Questions [October 2026 Update] Quiz

You have numerous private virtual machines on Google Cloud. You occasionally need to manage the servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote access to the servers in a manner that optimizes security and cost efficiency. What should you do?

Premium Access Includes