A global logistics organization is migrating its core route-optimization platform from an on-premises data center to Google Cloud. The executive leadership team has mandated a strict cutover deadline, but internal operations teams are showing resistance to change due to unfamiliarity with cloud governance, Infrastructure as Code (IaC), and security frameworks. Technically, the architecture requires large-scale Compute Engine instance provisioning across two regions during peak operations and processes sensitive supply-chain data subject to strict data exfiltration prevention policies. Which TWO actions should the Lead Cloud Architect recommend to address stakeholder requirements, manage organizational change, and satisfy technical constraints? (Select TWO.)
- Develop a role-based enablement program with hands-on Google Cloud and Terraform workshops for operations teams, while submitting regional Compute Engine resource quota increase requests well in advance of migration phases.Answer
- BGrant primitive Owner roles to operational leads during the migration window to minimize access friction and eliminate team resistance caused by strict Identity and Access Management (IAM) controls.
- Implement fine-grained predefined IAM roles alongside VPC Service Controls perimeters, combined with structured deployment validation gates aligned with business readiness milestones.Answer
- DDefer Compute Engine quota increase requests until final production load testing to prevent holding unallocated quota capacity during initial operational training stages.