Google Professional Cloud Security Engineer Question 170
Single answerGoogle Cloud PlatformYour organization has a complex Google Cloud hierarchy consisting of multiple folders and over 50 projects. You want to enforce consistent security policies across all projects while minimizing operational overhead. Which approach should you take to achieve this?
- A
Use Organization Policies to enforce restrictions centrally at the organization level, and ensure they automatically propagate to all folders and projects.
- B
Manually apply IAM roles and permissions to each project to align them with your security policies.
- C
Create a custom script to regularly audit all projects and apply security policies as needed.
- D
Use VPC Service Controls to isolate each project and manually configure security policies for each.
Show answer and explanation
Correct answer: A
Explanation
Organization Policies are a powerful feature in Google Cloud that allows you to enforce security and compliance rules across your entire resource hierarchy, including folders and projects. They propagate automatically, ensuring consistent policy application without the need for manual intervention or custom scripts. This makes them ideal for managing security at scale in large organizations.
- A. Correct.
Using Organization Policies is the best practice for enforcing consistent security policies at scale. These policies can be applied at the organization or folder level and automatically propagate to all child resources, minimizing operational overhead.
- B. Incorrect.
Manually applying IAM roles and permissions to each project is error-prone and inefficient for large hierarchies, leading to inconsistent policies.
- C. Incorrect.
While creating a custom script can help automate some processes, it adds unnecessary complexity and maintenance burden compared to using built-in tools like Organization Policies.
- D. Incorrect.
VPC Service Controls are primarily used for securing data access across services and are not designed to enforce general security policies across projects.