Examkin

Question

Difficulty: EasyConfiguring Organization Policies and Resource Hierarchy Constraints

An enterprise administrator needs to ensure that no virtual machines created within a specific folder can be assigned external IP addresses. Which Google Cloud service or feature should be configured on the folder to enforce this restriction across all descendant projects?

  1. An Organization Policy constraint restricting external IP accessAnswer
  2. B
    An IAM role binding that grants the Compute Viewer role to all project members
  3. C
    A primitive Owner role assigned at the organization level with customized exclusions
  4. D
    An IAM permission revocation on child project resources to override folder-level access

Answer

An Organization Policy constraint applied at the folder level enforces restrictions on resource configurations across all child projects.
Organization Policies enable administrators to set centralized configuration guardrails across the Google Cloud resource hierarchy. Applying an Organization Policy constraint at the folder level automatically enforces the restriction across all projects inherited by that folder.

Step-by-Step Solution

1
Identify the requirement to restrict specific resource configurations across multiple projects within a folder.
Recognize that enforcing resource configuration guardrails across a hierarchy node requires Organization Policies rather than IAM roles.
Organization Policies restrict what resources can do or how they are configured, whereas IAM controls who can take actions.
2
Select the appropriate Organization Policy scope.
Apply the policy constraint (such as compute.vmExternalIpAccess) at the target folder level.
Constraints applied at a folder inherit down to all child folders and projects contained within it.

Key Concept

Organization Policies enforce governance constraints on resources across the GCP resource hierarchy.
Rate this question

Topics

Configuring Organization Policies and Resource Hierarchy Constraints

More questions from this topic