Home Microsoft Exams Google Cloud Exams

Loading page

Curious about new developments and updates? Follow our social media.

Get a free certification question every week.

Microsoft Exams

AZ-104 Administrator
AZ-204 Developer
AZ-900 Fundamentals
All Microsoft Exams

Google Cloud Exams

Associate Data Practitioner
All Google Cloud Exams

Terms Privacy Cookies About

© 2026 StudyCerts. All rights reserved.

Loading page

Home
Google Cloud Exams
Professional Cloud DevOps Engineer
Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell)
A DevOps engineer needs to use Google Cloud Shell as a remot…

Professional Cloud DevOps Engineer

Professional Cloud DevOps Engineer

Advanced

Prepare and test your skills

Track Readiness

Description
Sample Question
Free Trial
Practice Test

Advanced

Prepare and test your skills

Track Readiness

Description
Sample Question
Free Trial
Practice Test

Gcloud Cloud Shell Ssh Authorize Session 2

Section: Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell)

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A DevOps engineer needs to use Google Cloud Shell as a remote sandbox for running infrastructure orchestration scripts. To streamline development, the engineer connects to Cloud Shell directly from their local terminal using the Google Cloud CLI (gcloud) and mounts their persistent home directory.

Which command should the engineer use to establish an interactive SSH session to Cloud Shell while ensuring their local gcloud credentials are automatically propagated and authorized inside the remote Cloud Shell environment?

Execute gcloud cloud-shell ssh --ssh-flag="-A" to enable OpenSSH agent forwarding.

Execute gcloud compute ssh cloudshell --tunnel-through-iap from the local workstation.

Execute gcloud auth print-access-token locally and export it to CLOUDSDK_AUTH_ACCESS_TOKEN over standard SSH.

Execute gcloud cloud-shell ssh --authorize-session from the local workstation.

Explanations

What `gcloud cloud-shell ssh --authorize-session` is

The gcloud cloud-shell ssh command creates an interactive SSH tunnel from a local workstation directly into the user's allocated Google Cloud Shell virtual machine instance. Cloud Shell provides a persistent $HOME directory backed by a Persistent Disk alongside pre-installed developer tools.

How it meets the requirements

Remote CLI connectivity: It establishes a direct, secure shell session to the Cloud Shell environment from the local terminal.
Credential propagation: Including the --authorize-session flag automatically forwards and synchronizes the local gcloud authentication context to the remote Cloud Shell instance. This allows remote scripts and CLI commands to execute under the authenticated identity without requiring manual gcloud auth login steps inside the session.

Key advantages and capabilities

Automated authorization: Propagates OAuth tokens and user identity seamlessly into the remote environment.
Persistent storage access: Connects directly to the instance hosting the user's persistent 5 GB $HOME directory.
Tooling consistency: Allows developers to leverage local terminal emulators and configurations while executing workloads against Cloud Shell's pre-configured cloud tooling.
Credential isolation: Eliminates the need to export long-lived service account keys or static credentials across environments.

Why this is optimal

Alternative SSH methods or generic compute commands cannot properly target the managed, ephemeral Cloud Shell container or propagate user credentials into its specialized runtime profile.

View source documentation

Related questions

Keep the momentum going with these hand-picked practice scenarios

AdvancedProfessional Cloud DevOps Engineer

Your enterprise is deploying Google Cloud Workstations for a software development team requiring custom development tooling and internal security packages. You must establish a secure lifecycle and deployment workflow for these workstations that satisfies the following requirements: Workstation container images must automatically rebuild on a daily schedule to incorporate upstream base image security updates. Container images must reside in a private repository and undergo automated vulnerability scanning upon upload. Cloud Workstations must securely pull the private container images following least-privilege access control. Which combination of steps should you implement to satisfy these requirements?

Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell)

AdvancedProfessional Cloud DevOps Engineer

A financial enterprise is establishing a secure cloud development environment on Google Cloud to support sensitive application engineering workloads under strict regulatory compliance. The architecture must satisfy the following security specifications: Dedicated source code repositories must be provisioned using Secure Source Manager and isolated privately without exposing endpoints to the public internet. All repository data at rest must be encrypted with Customer-Managed Encryption Keys (CMEK) managed via Cloud KMS. Repository instances and development resources must be protected against data exfiltration by isolating the project within a VPC Service Controls perimeter. Which configuration steps should the DevOps engineer implement?

AdvancedProfessional Cloud DevOps Engineer

An e-commerce platform hosts its core web application and transactional database in a single Google Cloud region (us-central1). Geographically distributed users in Europe and Asia experience high latency (Time to First Byte > 300 ms) when browsing catalog pages and loading static media assets. Additionally, repetitive database read queries during peak traffic spikes are causing high database CPU utilization and application degradation. You need to optimize the architecture to minimize user latency at the edge and offload repetitive read queries from the central database while avoiding multi-region database replication complexity. What should you do?

AdvancedProfessional Cloud DevOps Engineer

An e-commerce platform hosted on Google Kubernetes Engine (GKE) experiences an unprecedented traffic spike during a flash sale. The primary regional cluster reaches its maximum physical node quota and compute limits, causing critical user checkout requests to degrade alongside non-critical recommendation and browsing requests. You need to implement a traffic shedding and load balancing strategy using Google Cloud native networking to shed non-essential traffic, prioritize critical transaction journeys, and automatically overflow excess global traffic to healthy secondary clusters once service capacity limits are exceeded. What should you do?

AdvancedProfessional Cloud DevOps Engineer

An organization runs fault-tolerant batch data processing and CI/CD build tasks on Google Cloud Compute Engine. The DevOps team needs to optimize compute expenses using Spot VMs while satisfying the following operational criteria: The fleet must use the Spot VM provisioning model to achieve up to 91% cost savings. The instances must gracefully handle preemption events to persist execution state and progress. The infrastructure must automatically recreate and resume instances when Spot capacity becomes available without manual intervention. The instance configuration must adhere to Google Cloud platform restrictions for Spot VMs. Which configuration strategy should the DevOps team implement?

AdvancedProfessional Cloud Data Engineer

An enterprise runs an operational and analytics data platform on Google Cloud with the following access profiles and requirements: IoT operational telemetry: High-throughput time-series data is written directly to Cloud Bigtable. Real-time dashboards require single-digit millisecond latency for the most recent 30 days of data. Records between 31 and 365 days are queried infrequently for troubleshooting. Analytical summary data: Historical reporting tables in BigQuery are queried for business analysis. Once written, partitions or tables older than 90 days are never updated or modified, but analysts require native query performance without latency degradation. Raw telemetry archives: Raw event payload objects in Cloud Storage are stored for disaster recovery and operational audits, with expected read access occurring roughly once every 45 to 60 days. Which multi-service tiered storage strategy optimizes storage and retrieval costs while maintaining the required query latency?

Want more questions like this?

Get a free certification question every week.

Are you ready for the Professional Cloud DevOps Engineer?

50 questions in the full practice test

No account required · Instant results

More Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell) practice questions

Get a free certification question with a full explanation every week.

Professional Cloud DevOps Engineer

Provider: Google Cloud
Passing score: 70%
Questions: 50
Duration: 90 minutes

Other sections in this exam

Bootstrapping and maintaining a Google Cloud organization
Building and implementing CI/CD pipelines, including continuous testing, for application, infrastructure, and machine learning workloads
Applying site reliability engineering practices
Implementing observability practices and troubleshooting issues
Optimizing performance and cost

Ask Scout

Still curious? Scout, our AI tutor, can explain this concept further and answer your follow-up questions.

Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell)

Performance and latency issues

Adding capacity

Spot virtual machines (VMs)

Lifecycle management of data