nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #317

Your multinational organization is undergoing rapid expansion within Google Cloud. New teams and projects are added frequently. You are concerned about the potential for inconsistent security policy…

The correct answer is D. Use a hierarchical structure of folders. Implement template-based organization policies that. To manage IAM and organization policies at scale, enforce consistent standards, and allow regional autonomy, use a hierarchical folder structure with inherited template-based organization policies that permit overrides for regional teams.

Submitted by mike_84· Apr 18, 2026Configuring access within a cloud solution environment

Question

Your multinational organization is undergoing rapid expansion within Google Cloud. New teams and projects are added frequently. You are concerned about the potential for inconsistent security policy application and permission sprawl across the organization. You must enforce consistent standards while maintaining the autonomy of regional teams. You need to design a strategy to effectively manage IAM and organization policies at scale, ensuring security and administrative efficiency. What should you do?

Options

  • ACreate detailed organization-wide policies for common scenarios. Instruct teams to apply the
  • BDelegate the creation of organization policies to regional teams. Centrally review these policies
  • CDefine a small set of essential organization policies. Supplement these policies with a library of
  • DUse a hierarchical structure of folders. Implement template-based organization policies that

How the community answered

(57 responses)
  • A
    4% (2)
  • B
    5% (3)
  • C
    12% (7)
  • D
    79% (45)

Why each option

To manage IAM and organization policies at scale, enforce consistent standards, and allow regional autonomy, use a hierarchical folder structure with inherited template-based organization policies that permit overrides for regional teams.

ACreate detailed organization-wide policies for common scenarios. Instruct teams to apply the

Creating detailed organization-wide policies and instructing teams to apply them does not scale well and risks inconsistent implementation and administrative burden, failing to ensure consistent application.

BDelegate the creation of organization policies to regional teams. Centrally review these policies

Delegating policy creation to regional teams with central review introduces a significant bottleneck for rapid expansion and makes it challenging to enforce consistent standards without extensive oversight.

CDefine a small set of essential organization policies. Supplement these policies with a library of

Relying on a library of recommended best practices for supplementation lacks strong enforcement mechanisms, leading to potential inconsistency and permission sprawl as teams might not consistently implement them.

DUse a hierarchical structure of folders. Implement template-based organization policies thatCorrect

A hierarchical folder structure combined with inherited template-based organization policies ensures consistent standards are applied by default across child folders and projects. Allowing regional teams to override specific policies provides the necessary autonomy to adapt to local requirements while maintaining a baseline of centralized control.

Concept tested: Hierarchical policy management with folders

Source: https://cloud.google.com/resource-manager/docs/organization-policy/overview

Topics

#Organization Policy#Resource Hierarchy#IAM Governance#Policy Enforcement

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice