A cloud administrator is planning to enforce security restrictions across Google Cloud resources by applying Organization Policy constraints at the Organization level. Which of the following statements correctly describe the behavior and evaluation of Organization Policies in the resource hierarchy? (Select TWO.)
- Organization Policy constraints are inherited down the resource hierarchy from the Organization to child Folders and Projects unless an explicit policy evaluation change is configured at a lower level.Answer
- Organization Policies establish programmatic guardrails that restrict resource configurations regardless of the IAM roles granted to a user.Answer
- CGranting a user the primitive Owner role on a project grants them immunity from Organization Policy constraints evaluated within that project.
- DApplying an Organization Policy constraint to restrict public IP addresses automatically revokes existing IAM role bindings for external users.
Answer
Organization Policies are inherited down the resource hierarchy from the Organization to child Folders and Projects unless overridden, and they establish guardrails that restrict resource configurations regardless of IAM permissions.
The correct statements recognize that Organization Policies inherit downward through the resource hierarchy (from Organization to Folders and Projects) and that they enforce resource configuration limits independently of IAM roles assigned to users.
Step-by-Step Solution
Key Concept
Organization Policy inheritance and distinction from IAM roles
Estimated Time:1m 0s