Google Professional Cloud DevOps Engineer Question 4
Select 2Google Cloud PlatformYour organization is undergoing a restructuring process, and the engineering team has decided to reorganize its Google Cloud projects to better align with the new hierarchy. They plan to group projects under folders based on organizational departments (e.g., Engineering, Marketing). As a Cloud DevOps Engineer, you are tasked with ensuring that IAM policies are properly inherited and aligned after the reorganization. Which of the following considerations are true when working with projects and folders in this scenario?
- A
IAM policies applied at the folder level are inherited by all projects within that folder.
- B
A project can belong to multiple folders simultaneously for flexible resource organization.
- C
Moving a project to a different folder may result in the project inheriting new IAM policies from the destination folder.
- D
Folders provide a way to group and manage billing for all projects within them.
- E
Folders are required for creating and managing projects in Google Cloud.
Show answer and explanation
Correct answers: A, C
Explanation
Projects and folders are critical components of Google Cloud's resource hierarchy. Folders allow you to group related projects and apply organizational policies, such as IAM policies, at a higher level. IAM policies set at the folder level automatically propagate to all projects within that folder. When reorganizing projects, it's crucial to account for potential changes in IAM policy inheritance, as moving a project to a new folder may result in the application of new access control policies. However, folders are not required for managing projects, and each project can only belong to one folder at a time.
- A. Correct.
Correct. IAM policies set at the folder level propagate to all projects within the folder. This helps enforce consistent access control for resources under the folder.
- B. Incorrect.
Incorrect. A project can only belong to one folder at a time. This ensures a clear and hierarchical structure within the resource hierarchy.
- C. Correct.
Correct. When a project is moved to a new folder, it will inherit the IAM policies applied to the destination folder, which may differ from its previous policies.
- D. Incorrect.
Incorrect. Folders do not manage billing directly. Billing is managed at the project level, and folders are primarily used for organizing resources and applying access control.
- E. Incorrect.
Incorrect. Folders are not mandatory for creating or managing projects. Projects can exist directly within an organization or under a folder, depending on the structure.