Google
PROFESSIONAL-CLOUD-ARCHITECT · Question #108
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what…
The correct answer is C. The effective policy is the union of the policy set at the node and policies inherited from its. The effective policy for a resource is the union of the policy set at that resource and the policy inherited from its parent. https://cloud.google.com/iam/docs/resource-hierarchy-access-control
Submitted by certguy· Mar 30, 2026Designing for security and compliance
Question
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?
Options
- AThe effective policy is determined only by the policy set at the node
- BThe effective policy is the policy set at the node and restricted by the policies of its ancestors
- CThe effective policy is the union of the policy set at the node and policies inherited from its
- DThe effective policy is the intersection of the policy set at the node and policies inherited from its
How the community answered
(64 responses)- A5% (3)
- B2% (1)
- C92% (59)
- D2% (1)
Explanation
The effective policy for a resource is the union of the policy set at that resource and the policy inherited from its parent. https://cloud.google.com/iam/docs/resource-hierarchy-access-control
Topics
#IAM policies#resource hierarchy#policy inheritance#organizations
Community Discussion
No community discussion yet for this question.