Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another. Each department has several environments of its own: development, testing

Question

Options

• ACreate a project per department, and create a folder per environment in each project.
• BCreate a folder per department, and create a project per environment in each folder.
• CCreate a Cloud Identity domain per department, and create a project per environment in each
• DCreate a Cloud Identity domain per environment, and create a project per department in each

• A
  3% (1)
• B
  85% (34)
• C
  8% (3)
• D
  5% (2)

Explanation

In Google Cloud's resource hierarchy (Organization > Folders > Projects > Resources), folders are the correct unit for grouping related projects and applying shared policies. Creating one folder per department allows department-level IAM policies and quotas to be inherited by all environments beneath them. Within each department folder, creating one project per environment (dev, test, prod) provides strong isolation boundaries, separate billing, and distinct access controls per environment. Option A reverses the hierarchy incorrectly. Options C and D incorrectly use Cloud Identity domains (which are for user identity management, not resource segregation) as the primary isolation mechanism.

No community discussion yet for this question.