Examkin

Question

Difficulty: EasyManaging Cloud Projects and Resource Hierarchy

A cloud administrator is organizing resources for a team in Google Cloud. Which TWO statements correctly describe the fundamental rules of the Google Cloud resource hierarchy and IAM policy inheritance? (Select TWO)

  1. IAM policies applied at a parent node in the resource hierarchy are automatically inherited by all child resources underneath it.Answer
  2. Projects can be contained inside Folders or directly under the Organization node within the resource hierarchy.Answer
  3. C
    Revoking a permission at the project level overrides and blocks the same permission inherited from a parent folder.
  4. D
    Organization policies are used to grant individual users access permissions to specific project resources.
  5. E
    Assigning the primitive Owner role at the project level is required for a user to inherit folder-level permissions.

Answer

Permissions granted at a parent node are inherited by all child resources, and Projects can be placed inside Folders or directly under the Organization node.
The resource hierarchy in Google Cloud flows from Organization > Folder > Project > Resource. IAM policy inheritance is strictly additive, meaning child resources automatically inherit all permissions granted on parent folders or the organization. Additionally, projects can be child nodes of either a folder or the organization node directly.

Step-by-Step Solution

1
Analyze how IAM policy inheritance works in the Google Cloud resource hierarchy.
IAM permissions flow downward from Organization to Folders to Projects and resources in an additive manner.
Understanding additive inheritance confirms that parent node permissions cannot be revoked at lower levels.
2
Evaluate valid structural parent-child relationships in the Google Cloud resource hierarchy.
Projects can exist directly under the Organization root or grouped inside Folders.
Folders provide grouping mechanisms, but projects can also sit directly under the organization.

Key Concept

Google Cloud Resource Hierarchy Structure and Additive IAM Inheritance
Rate this question

Topics

Managing Cloud Projects and Resource Hierarchy

More questions from this topic