Google Associate Cloud Engineer Question 2
Select 3Google Cloud PlatformYou are tasked with setting up a new project in Google Cloud Platform for a team within your organization. The team requires separate billing for their projects, and you need to ensure that the resources are organized in a way that aligns with the organization's security policies and access control requirements. Which steps should you take to properly create and manage the resource hierarchy?
- A
Create a new Organization node and assign the project under it.
- B
Create a new Billing Account specifically for the team and link it to the project.
- C
Use folders to group the project under a specific department within your organization.
- D
Set up Identity and Access Management (IAM) policies at the folder level to manage permissions.
- E
Assign the project directly under the root Organization node without any folder.
Show answer and explanation
Correct answers: B, C, D
Explanation
To properly create and manage a resource hierarchy in Google Cloud Platform, especially when dealing with separate billing and access control requirements, it's important to use folders to organize projects according to departmental needs and set up IAM policies to manage permissions effectively. Creating a separate Billing Account ensures that costs are tracked independently, providing better financial management. These steps align with organizational structures and help maintain security and compliance policies.
- A. Incorrect.
Creating a new Organization node is not necessary if your company already has an existing Organization node. Organizations are typically set up at the company level, not per team.
- B. Correct.
Creating a new Billing Account for the team allows you to separate billing for their projects, which is essential for tracking costs independently.
- C. Correct.
Using folders to group projects under a specific department helps in organizing resources and aligning them with departmental structures and policies.
- D. Correct.
Setting up IAM policies at the folder level allows for granular control over access and permissions, which is crucial for maintaining security and compliance.
- E. Incorrect.
Assigning the project directly under the root Organization node without any folder does not align with best practices for resource organization and access control.