PROFESSIONAL-CLOUD-ARCHITECT Question #372: Real Exam Question with Answer & Explanation

Question

A large, multinational corporation is migrating to Google Cloud. The company has several distinct business units: Finance, Marketing, and Research and Development (R&D). The central security team has mandated governance requirements for each business unit:. - Finance: Must be restricted to deploying resources only in specific, compliant regions (us-central1 and europe-west2). Access to their projects must be tightly controlled by a dedicated finance-admins group. - Marketing: Needs separate environments for production and development, with different teams managing each environment. - R&D: Requires maximum flexibility to experiment with new services but must be completely isolated to prevent any impact on production systems. - Global Auditing: A central compliance team requires read-only access to view all resources across the entire company for auditing purposes. You need to design a resource hierarchy that enforces these security policies at scale according to the Google Cloud Well-Architected Framework while providing the correct level of autonomy for each business unit. What should you do?

Options

• ACreate a folder for each department under the root Organization node. Apply the resource
• BPlace all projects directly under the Organization node. Use network tags and service accounts to
• CCreate separate Google Cloud Organizations for each department (Finance, Marketing, and
• DCreate a single project for each department. Apply the resource location policy directly to the