Examkin

Soru

Zorluk: OrtaIdentity and Access Management (IAM) Roles and Resource Hierarchy

A Cloud Architect is establishing permission governance for a renewable energy management platform in Google Cloud. Arrange the levels of the Google Cloud resource hierarchy in order from the highest ancestor node at the top down to the individual resource level at the bottom to illustrate how inherited IAM permissions propagate downward.

  1. 1Organization Node
  2. 2Folder Node
  3. 3Project Node
  4. 4Resource Node

Cevap

The correct hierarchy order from top to bottom is Organization Node, followed by Folder Node, Project Node, and finally Resource Node.
Google Cloud IAM enforces policy inheritance down a strict four-level hierarchy: Organization -> Folder -> Project -> Resource. Permissions granted at higher levels automatically propagate down to all contained child nodes.

Adım Adım Çözüm

1
Identify the root ancestor in Google Cloud IAM resource management.
The Organization node is identified as the root element (level 1).
In Google Cloud, the Organization node represents the company domain and sits at the top of the resource hierarchy.
2
Identify the intermediate grouping layer designed for organizational unit management.
The Folder node is identified as the level directly beneath the Organization (level 2).
Folders allow organizing projects into sub-trees for environment separation (e.g., Prod, Dev) and policy inheritance.
3
Identify the core administrative boundary where APIs and billing are enabled.
The Project node is placed below Folders (level 3).
Projects are child elements of Folders or Organizations and hold service resource instances.
4
Identify the actual GCP service instance level where data and compute reside.
The Resource node is identified as the lowest leaf node (level 4).
Individual services (e.g., GCS bucket, Compute Engine instance) are created inside projects and inherit IAM policies from all parent nodes.

Anahtar Kavram

Google Cloud Resource Hierarchy and IAM Policy Inheritance
Bu soruyu puanla

Konular

Identity and Access Management (IAM) Roles and Resource Hierarchy