Google Professional Cloud DevOps Engineer Question 180
Select 3Google Cloud PlatformYour organization is migrating to Google Cloud and needs to design a resource hierarchy to ensure clear separation of environments, centralized management of policies, and scalability for future projects. The organization has multiple departments, including Marketing, Engineering, and Finance, each with distinct requirements and budgets. What are the best practices to follow when designing the resource hierarchy?
- A
Use folders to represent departments and separate their projects under respective folders.
- B
Create a single flat hierarchy where all projects are directly under the organization node for simplicity.
- C
Apply IAM policies at the folder level to manage access for each department.
- D
Use projects to represent environments (e.g., dev, staging, prod) for better separation of resources.
- E
Avoid using folders because they increase administrative complexity.
Show answer and explanation
Correct answers: A, C, D
Explanation
Designing a resource hierarchy in Google Cloud requires careful consideration of organizational structure, access control, and scalability. Folders should represent departments to logically group resources, and IAM policies can be applied at the folder level for centralized management. Projects are best suited for separating environments like dev, staging, and prod, ensuring proper resource isolation and control. Avoiding folders or using a flat hierarchy can lead to scalability and management challenges.
- A. Correct.
Using folders to represent departments helps in organizing resources logically and allows the application of IAM policies and budgets at the department level.
- B. Incorrect.
A flat hierarchy under the organization node makes it difficult to scale, manage IAM policies, and separate resources effectively across departments and environments.
- C. Correct.
Applying IAM policies at the folder level allows centralized and consistent access control for all resources within that folder.
- D. Correct.
Using projects to represent environments helps in isolating resources, enabling better governance and control over dev, staging, and prod environments.
- E. Incorrect.
Avoiding folders is not recommended because folders are a critical part of the Google Cloud resource hierarchy, enabling logical organization and policy application.