Google Professional Cloud Architect Exam - Topic 1 Question 73 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 73
Topic #: 1

[All Professional Cloud Architect Questions]

Your company has a Google Workspace account and Google Cloud Organization Some developers in the company have created Google Cloud projects outside of the Google Cloud Organization

You want to create an Organization structure that allows developers to create projects, but prevents them from modifying production projects You want to manage policies for all projects centrally and be able to set more restrictive policies for production projects

You want to minimize disruption to users and developers when business needs change in the future You want to follow Google-recommended practices How should you design the Organization structure?

A1 Create a second Google Workspace account and Organization
2 Grant all developers the Project Creator IAM role on the new Organization
3 Move the developer projects into the new Organization
4 Set the policies for all projects on both Organizations.
5 Additionally set the production policies on the original Organization

B1 Create a folder under the Organization resource named 'Production '
2 Grant all developers the Project Creator IAM role on the Organization 3. Move the developer projects into the Organization
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the 'Production' folder

C1 Create folders under the Organization resource named 'Development' and Production'
2 Grant all developers the Project Creator IAM role on the ''Development1 folder 3. Move the developer projects into the 'Development' folder
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the 'Production' folder

D1 Designate the Organization for production projects only
2 Ensure that developers do not have the Project Creator IAM role on the Organization
3 Create development projects outside of the Organization using the developer Google Workspace accounts
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the individual production projects

Show Suggested Answer

Suggested Answer: C

This option can help create an organization structure that allows developers to create projects, but prevents them from modifying production projects. Folders are containers for projects and other folders within Google Cloud organizations. Folders allow resources to be structured hierarchically and inherit policies from their parent resources. By creating folders under the organization resource named ''Development'' and ''Production'', you can organize your projects by environment and apply different policies to them. By granting all developers the Project Creator IAM role on the ''Development'' folder, you can allow them to create projects under that folder, but not under the ''Production'' folder. By moving the developer projects into the ''Development'' folder, you can ensure that they are subject to the policies set on that folder. By setting the policies for all projects on the organization, you can manage policies centrally and efficiently. By additionally setting the production policies on the ''Production'' folder, you can enforce more restrictive policies for production projects and prevent developers from modifying them. The other options are not optimal for this scenario, because they either create a second Google Workspace account and organization, which increases complexity and cost (A), or do not use folders to organize projects by environment, which makes it harder to manage policies and permissions (B, D). Reference:

https://cloud.google.com/resource-manager/docs/creating-managing-folders

https://cloud.google.com/architecture/framework/system-design

by Tiera at Dec 14, 2023, 05:19 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Michal

3 months ago

I’m not sure about D, that could lead to chaos with projects outside the Org.

upvoted 0 times

...

Lorrie

4 months ago

C is better for clarity, separate folders make sense.

upvoted 0 times

...

Lilli

4 months ago

Wait, why not just use one Organization? Sounds complicated.

upvoted 0 times

...

Man

4 months ago

I agree, B is the way to go!

upvoted 0 times

...

Kris

4 months ago

Option B seems solid, folders are a good way to organize.

upvoted 0 times

...

Clemencia

4 months ago

I recall that we should avoid giving developers too much access to production. Option D sounds risky since it suggests creating projects outside the Organization. I think we need a more centralized approach.

upvoted 0 times

...

In

5 months ago

I'm a bit confused about whether creating a second Google Workspace account is necessary. Option A seems complicated, and I thought we should keep everything under one Organization.

upvoted 0 times

...

Ardella

5 months ago

I think we practiced a similar question where we had to restrict access to production resources. I feel like option C might be the right choice since it separates development and production clearly.

upvoted 0 times

...

Mickie

5 months ago

I remember we discussed the importance of using folders to manage projects effectively. Option B seems to align with that, but I'm not entirely sure about the best way to set the policies.

upvoted 0 times

...

William

5 months ago

Okay, I've got a good handle on this. I think Option C is the way to go - creating separate folders for development and production projects, and then setting the appropriate policies on each. That way we can maintain control over the production environment while still giving developers the flexibility they need.

upvoted 0 times

...

Sabra

5 months ago

Hmm, I'm a bit confused by the different options. I'll need to re-read the question and think through the pros and cons of each approach to make sure I understand the best way to design the organization structure.

upvoted 0 times

...

Marcos

5 months ago

This seems like a tricky question, but I think I can work through it. I'll need to carefully consider the requirements around minimizing disruption, managing policies centrally, and following Google-recommended practices.

upvoted 0 times

...

Mabelle

5 months ago

This is a straightforward question, in my opinion. Option B seems like the simplest and most straightforward approach that meets all the requirements. I'll go with that one.

upvoted 0 times

...

Ulysses

5 months ago

I've got a good feeling about this one. The key is to understand how the navigation menu is configured and where different items are located. I think option C is the most likely answer.

upvoted 0 times

...

Genevive

5 months ago

Okay, I think the key here is that Mark is having a hard time tolerating the recommended positions. So the goal should be focused on getting him to tolerate those positions, rather than just avoiding certain behaviors.

upvoted 0 times

...

Deonna

5 months ago

This one seems straightforward. I'm pretty sure the answer is C, since the # symbol is commonly used to start comment lines in shell scripts.

upvoted 0 times

...

Rasheeda

2 years ago

Agreed. Although, I have to say, the 'Development' and 'Production' folder names are a bit on the nose, don't you think? Maybe we could get a little creative there.

upvoted 0 times

...