Google Cloud Professional Cloud Architect PCA — Topic 1 Question 251

Question

A large, multinational corporation is migrating to Google Cloud. The company has several distinct business units: Finance, Marketing, and Research and Development (R&D). The central security team has mandated governance requirements for each business unit: • Finance: Must be restricted to deploying resources only in specific, compliant regions (us-central1 and europe-west2). Access to their projects must be tightly controlled by a dedicated finance-admins group. • Marketing: Needs separate environments for production and development, with different teams managing each environment. • R&D: Requires maximum flexibility to experiment with new services but must be completely isolated to prevent any impact on production systems. • Global Auditing: A central compliance team requires read-only access to view all resources across the entire company for auditing purposes. You need to design a resource hierarchy that enforces these security policies at scale according to the Google Cloud Well-Architected Framework while providing the correct level of autonomy for each business unit. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a folder for each department under the root Organization node. Apply the resource location Organization Policy on the Finance folder. Within the Marketing folder, create separate projects for mktg-prod and mktg... Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Architect PCA — Question 251