GCP Associate Cloud Engineer Practice Question

Clicking the SSH button next to the instance on the VM instances page launches a browser-based terminal that proxies the SSH session through Identity-Aware Proxy over HTTPS (TCP 443). Because the connection originates from the browser to Google's back end using port 443, no outbound TCP 22 traffic leaves the corporate network and no local tools need to be installed.

Running gcloud compute ssh --tunnel-through-iap would also avoid port 22, but it requires the Cloud SDK, which the scenario forbids. Serial console access is meant for low-level troubleshooting and still requires enabling it and using the Google Cloud CLI or API. Generating an RDP credential is irrelevant to a Linux VM and still would not satisfy the port 22 restriction for SSH.