Google Professional Cloud Security Engineer Question 162
Single answerGoogle Cloud PlatformYour organization is planning to migrate its workloads to Google Cloud. As the Professional Cloud Security Engineer, you are tasked with designing the resource hierarchy to ensure proper access controls and scalability. The organization has multiple business units, each requiring its own projects, and some shared resources like networking and logging. What is the most appropriate way to structure the resource hierarchy to meet these requirements?
- A
Create a single project for all business units and manage resources within that project.
- B
Create separate projects for each business unit under a single folder, and use folders to group shared resources.
- C
Create separate folders for each business unit and shared resources, and place the projects under their respective folders.
- D
Place all resources at the organization level without using folders or projects.
Show answer and explanation
Correct answer: C
Explanation
In Google Cloud, the resource hierarchy ensures visibility, access control, and scalability. For organizations with multiple business units and shared resources, creating separate folders for each business unit provides clear boundaries and simplifies access management. A separate folder for shared resources ensures centralized control over common assets like networking and logging. Organizing resources this way aligns with best practices and makes it easier to apply IAM policies, billing, and compliance controls.
- A. Incorrect.
This option is not suitable as a single project for all business units would make access control and resource management complex, especially for larger organizations.
- B. Incorrect.
While creating separate projects for each business unit is a good practice, using a single folder for shared resources is not ideal as it does not provide the necessary separation for shared assets.
- C. Correct.
This is the correct option. Creating separate folders for business units ensures clear separation and scalability, while a separate folder for shared resources allows centralized management and access control.
- D. Incorrect.
Placing all resources at the organization level is not a recommended practice as it lacks structure and makes applying access controls and policies difficult.