Google Professional Cloud DevOps Engineer Question 199
Select 2Google Cloud PlatformYour team is managing a Google Cloud project and needs to implement configuration management to ensure consistent deployment of resources. You decide to use Google Cloud Config Connector to manage these resources declaratively. However, the team is concerned about enforcing policies to ensure compliance with organizational standards. Which combination of tools should you use to enforce policies and manage configurations effectively?
- A
Google Cloud Config Connector for configuration and Policy Controller for policy enforcement
- B
Terraform for configuration management and Policy Controller for policy enforcement
- C
Google Cloud Deployment Manager for configuration and IAM policies for policy enforcement
- D
Google Cloud Config Connector for configuration and Organization Policy Service for policy enforcement
- E
Terraform for configuration management and Organization Policy Service for policy enforcement
Show answer and explanation
Correct answers: A, D
Explanation
To effectively manage configurations and enforce policies, the best approach in this scenario is to use Google Cloud Config Connector for declarative configuration management and either Policy Controller or Organization Policy Service for policy enforcement. Policy Controller provides a Kubernetes-native way to enforce guardrails, while Organization Policy Service enforces organization-wide compliance standards.
- A. Correct.
Correct: Google Cloud Config Connector allows you to declaratively manage Google Cloud resources using Kubernetes custom resources, and Policy Controller (based on Open Policy Agent) enforces policies to ensure compliance.
- B. Incorrect.
Partially correct: Terraform can manage Google Cloud resources declaratively, but this option doesn’t specifically include Config Connector, which is Kubernetes-native. Policy Controller can still enforce policies, but this answer doesn’t align with the scenario’s focus on Config Connector.
- C. Incorrect.
Incorrect: Google Cloud Deployment Manager can manage configurations, but IAM policies are not used for enforcing organization-wide compliance policies. IAM is used for access control.
- D. Correct.
Correct: Google Cloud Config Connector is suitable for declarative configuration management, and Organization Policy Service enforces policies to manage compliance with organizational standards.
- E. Incorrect.
Partially correct: Terraform can manage configurations declaratively, and Organization Policy Service can enforce compliance, but this option doesn’t align with the scenario’s focus on Config Connector.