Examkin

Soru

Zorluk: KolayConfiguring Organization Policies and Resource Hierarchy Constraints

An enterprise administrator needs to ensure that no virtual machines created within a specific folder can be assigned external IP addresses. Which Google Cloud service or feature should be configured on the folder to enforce this restriction across all descendant projects?

  1. An Organization Policy constraint restricting external IP accessCevap
  2. B
    An IAM role binding that grants the Compute Viewer role to all project members
  3. C
    A primitive Owner role assigned at the organization level with customized exclusions
  4. D
    An IAM permission revocation on child project resources to override folder-level access

Cevap

An Organization Policy constraint applied at the folder level enforces restrictions on resource configurations across all child projects.
Organization Policies enable administrators to set centralized configuration guardrails across the Google Cloud resource hierarchy. Applying an Organization Policy constraint at the folder level automatically enforces the restriction across all projects inherited by that folder.

Adım Adım Çözüm

1
Identify the requirement to restrict specific resource configurations across multiple projects within a folder.
Recognize that enforcing resource configuration guardrails across a hierarchy node requires Organization Policies rather than IAM roles.
Organization Policies restrict what resources can do or how they are configured, whereas IAM controls who can take actions.
2
Select the appropriate Organization Policy scope.
Apply the policy constraint (such as compute.vmExternalIpAccess) at the target folder level.
Constraints applied at a folder inherit down to all child folders and projects contained within it.

Anahtar Kavram

Organization Policies enforce governance constraints on resources across the GCP resource hierarchy.
Bu soruyu puanla

Konular

Configuring Organization Policies and Resource Hierarchy Constraints

Bu konudan daha fazla soru