Google Exam Professional Cloud Architect Topic 1 Question 89 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 89
Topic #: 1

[All Professional Cloud Architect Questions]

Your company has a Google Workspace account and Google Cloud Organization Some developers in the company have created Google Cloud projects outside of the Google Cloud Organization

You want to create an Organization structure that allows developers to create projects, but prevents them from modifying production projects You want to manage policies for all projects centrally and be able to set more restrictive policies for production projects

You want to minimize disruption to users and developers when business needs change in the future You want to follow Google-recommended practices How should you design the Organization structure?

A1 Create a second Google Workspace account and Organization
2 Grant all developers the Project Creator IAM role on the new Organization
3 Move the developer projects into the new Organization
4 Set the policies for all projects on both Organizations.
5 Additionally set the production policies on the original Organization

B1 Create a folder under the Organization resource named 'Production '
2 Grant all developers the Project Creator IAM role on the Organization 3. Move the developer projects into the Organization
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the 'Production' folder

C1 Create folders under the Organization resource named 'Development' and Production'
2 Grant all developers the Project Creator IAM role on the ''Development1 folder 3. Move the developer projects into the 'Development' folder
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the 'Production' folder

D1 Designate the Organization for production projects only
2 Ensure that developers do not have the Project Creator IAM role on the Organization
3 Create development projects outside of the Organization using the developer Google Workspace accounts
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the individual production projects

Show Suggested Answer

Suggested Answer: C

This option can help create an organization structure that allows developers to create projects, but prevents them from modifying production projects. Folders are containers for projects and other folders within Google Cloud organizations. Folders allow resources to be structured hierarchically and inherit policies from their parent resources. By creating folders under the organization resource named ''Development'' and ''Production'', you can organize your projects by environment and apply different policies to them. By granting all developers the Project Creator IAM role on the ''Development'' folder, you can allow them to create projects under that folder, but not under the ''Production'' folder. By moving the developer projects into the ''Development'' folder, you can ensure that they are subject to the policies set on that folder. By setting the policies for all projects on the organization, you can manage policies centrally and efficiently. By additionally setting the production policies on the ''Production'' folder, you can enforce more restrictive policies for production projects and prevent developers from modifying them. The other options are not optimal for this scenario, because they either create a second Google Workspace account and organization, which increases complexity and cost (A), or do not use folders to organize projects by environment, which makes it harder to manage policies and permissions (B, D). Reference:

https://cloud.google.com/resource-manager/docs/creating-managing-folders

https://cloud.google.com/architecture/framework/system-design

by Viki at Aug 03, 2024, 10:35 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Earleen

3 months ago

I personally prefer option D. It designates the Organization for production projects only and keeps development projects outside of the Organization.

upvoted 0 times

...

Yen

3 months ago

That's a good point. Option C does provide a clear separation between development and production projects. It could make policy management easier.

upvoted 0 times

...

Graciela

3 months ago

I disagree, I believe option C is better. It separates development and production projects into different folders for better organization.

upvoted 0 times

...

4 months ago

I like how Option C uses the folder structure to keep things organized. That's a nice, clean way to handle the different project types.

upvoted 0 times

Charlene

3 months ago

Yeah, it's a simple and effective way to ensure policies are set correctly for each type of project.

upvoted 0 times

...

Tina

3 months ago

I agree, having separate folders for development and production projects makes it easier to manage.

upvoted 0 times

...

Dylan

3 months ago

Option C does seem like a good way to keep things organized.

upvoted 0 times

...

4 months ago

Option C looks like the best choice here. Separating the development and production projects into different folders will make it easier to manage the policies for each environment.

upvoted 0 times

...