Google Associate Cloud Engineer Question 8
Single answerGoogle Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you are tasked with ensuring that all projects within your organization's Google Cloud environment adhere to a specific set of security policies. You need to apply a policy that restricts the use of external IP addresses on virtual machines across multiple projects within your organization. Which of the following steps should you take to achieve this?
- A
A. Apply the policy at the organization level to ensure all projects inherit the restriction.
- B
B. Apply the policy at each project level individually to manage exceptions more easily.
- C
C. Apply the policy at the folder level if the projects are organized under a common folder.
- D
D. Use IAM roles to restrict external IP addresses on virtual machines.
Show answer and explanation
Correct answer: A
Explanation
The most efficient way to ensure that all projects adhere to a specific security policy, such as restricting external IP addresses, is to apply the policy at the organization level. This ensures that the policy is inherited by all projects, providing a consistent and centralized approach to security management across the entire organization.
- A. Correct.
Option A is correct because applying the policy at the organization level ensures that all projects within the organization inherit the policy, providing a centralized and consistent application of security restrictions.
- B. Incorrect.
Option B is incorrect because applying policies at the project level requires managing each project individually, which is inefficient and error-prone for a consistent security policy.
- C. Incorrect.
Option C is incorrect because while applying the policy at the folder level can be effective if the projects are organized under a common folder, it does not ensure organization-wide enforcement unless all projects are under that folder.
- D. Incorrect.
Option D is incorrect because IAM roles are used for access management, not for applying organizational policies such as restricting external IP addresses.