Google Associate Cloud Engineer Question 4
Single answerGoogle Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you are tasked with setting up a resource hierarchy for a new project in your organization. The organization already has several departments, each needing isolated resources. What is the best way to structure the resource hierarchy to achieve this?
- A
Create a single project and use IAM policies to manage access for each department.
- B
Set up a folder for each department under the organization and create separate projects within each folder.
- C
Create a separate organization for each department.
- D
Use labels to differentiate resources for each department within a single project.
Show answer and explanation
Correct answer: B
Explanation
The best practice for organizing resources in Google Cloud is to use a hierarchy that allows for clear separation and management of resources. By creating a folder for each department under the organization, you can group related projects and apply IAM policies at the folder level, ensuring that access and management are both secure and efficient. This approach aligns with Google Cloud's resource hierarchy model, which is designed to provide scalable and manageable access and organization.
- A. Incorrect.
Using a single project with IAM policies can lead to complex and difficult-to-manage access controls as the number of departments and resources grows.
- B. Correct.
Setting up a folder for each department under the organization allows for better isolation, management, and access control of resources. It also aligns with Google Cloud's best practices for organizing resources.
- C. Incorrect.
Creating a separate organization for each department is not feasible as it requires separate billing accounts and does not leverage the centralized management benefits of a single organization.
- D. Incorrect.
Labels are useful for organizing and filtering resources but do not provide the necessary isolation and access control needed for different departments.