In a locked‑down environment where VMs have no public Internet access and no VPN exists yet, you need to install software on a Compute Engine VM. How should you install it?
Choose an answer
Tap an option to check your answer.
Correct answer: Upload installation files to Cloud Storage. Place the VM on a subnet with Private Google Access, assign only an internal IP, and download the files to the VM using gsutil..
Why this is the answer
The correct approach leverages Private Google Access, which allows VMs with only internal IP addresses to reach Google APIs and services, including Cloud Storage, without traversing the public internet. By uploading installation files to Cloud Storage and configuring the VM's subnet for Private Google Access, you can securely download files using gsutil. The incorrect options involving firewall rules to allow specific IP ranges are less secure and more complex to manage, as Google service IP ranges can change. Cloud Source Repositories are designed for code management, not general file distribution, and gcloud is a command-line tool, not a download utility for repository contents in this context.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed