Google Professional Cloud DevOps Engineer Question 3
Single answerGoogle Cloud PlatformYour organization wants to implement a structured hierarchy in Google Cloud for managing resources and applying centralized policies. They have multiple departments, each requiring isolated billing and access control, but some policies need to be shared at a higher level. How should you organize the resources in Google Cloud to meet these requirements?
- A
Create a single project for the entire organization and use IAM roles to manage access for each department.
- B
Create a folder for each department under the Organization node and organize individual projects within their respective folders.
- C
Create separate organizations for each department and manage projects within those organizations.
- D
Create a single folder under the Organization node and place all projects for all departments within it.
Show answer and explanation
Correct answer: B
Explanation
The correct approach is to use folders within the Organization node to represent departments. This allows for logical grouping of projects, isolated billing and access control, and the ability to apply granular or shared policies at different levels of the hierarchy. The Organization node provides a centralized point for managing and applying policies across the entire organization, while folders allow for departmental segregation.
- A. Incorrect.
Using a single project for the entire organization does not provide proper isolation for billing, access control, or resource management. This approach is not scalable for large organizations.
- B. Correct.
Creating a folder for each department under the Organization node provides a structured way to manage resources. Policies and IAM roles can be applied at the folder level for each department, while shared policies can be applied at the Organization level.
- C. Incorrect.
Creating separate organizations is not recommended or feasible since each Google Workspace or Cloud Identity account can only have a single Organization node. Departments should be managed within the same Organization node.
- D. Incorrect.
Using a single folder for all projects does not provide sufficient isolation or granularity for managing billing and access control for each department.