Google Professional Cloud DevOps Engineer
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
You are developing a Node.js application on a Cloud Workstations instance using Code OSS. The application serves a simple web page, and all required firewall rules are properly configured. You've tested the application by running it on port 3000 within the Cloud Workstations environment, but you need to securely access the web page from your local machine while adhering to Google's security best practices. What steps should you take?
Explanation:
To access the web page from your local machine while following Google-recommended security practices, the best approach is to use Identity-Aware Proxy (IAP) for TCP forwarding. This method securely tunnels traffic to your Cloud Workstations VM without exposing it to the public internet. Option B, 'Run the gcloud compute start-iap-tunnel command to the Cloud Workstations VM,' correctly describes this approach. Option A, using a browser on a bastion host VM, is less direct and not necessary given the capabilities of IAP. Option C, allowing public IP addresses, would violate security best practices by exposing the workstation to the internet. Option D, clicking the preview link in the Code OSS panel, might not be applicable or secure for accessing the application from your local machine outside of the Cloud Workstations environment.