Answer-first summary for fast verification
Answer: Use a hierarchical structure of folders. Implement template-based organization policies that cascade down, allowing limited customization by regional teams.
Option D is the optimal choice because it addresses all key requirements: it uses Google Cloud's hierarchical folder structure to organize resources logically, implements template-based organization policies that cascade down the hierarchy to enforce consistent security standards across the organization, and allows limited customization by regional teams to maintain their autonomy. This approach provides centralized control for security while enabling appropriate flexibility at regional levels. In contrast, option A relies too heavily on manual application of policies, which is prone to inconsistency at scale; option B delegates policy creation to regional teams, risking security inconsistencies; and option C's optional policy templates lack the enforcement mechanism needed to guarantee consistent security standards across the organization.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your multinational organization is rapidly expanding in Google Cloud, with frequent additions of new teams and projects. You need to prevent inconsistent security policy application and permission sprawl across the organization. How do you design a strategy to manage IAM and Organization Policies at scale, enforcing consistent security standards while preserving the autonomy of regional teams?
A
Create detailed organization-wide policies for common scenarios. Instruct teams to apply the policies carefully at the project and resource level as needed.
B
Delegate the creation of organization policies to regional teams. Centrally review these policies for compliance before deployment.
C
Define a small set of essential organization policies. Supplement these policies with a library of optional policy templates for teams to leverage as needed.
D
Use a hierarchical structure of folders. Implement template-based organization policies that cascade down, allowing limited customization by regional teams.
No comments yet.