Hard1 markMultiple Choice

GCP PCA · Question 22 · Domain 1: Designing and Planning a Cloud Solution Architecture

You are designing the GCP Resource Hierarchy for a large enterprise. The company has three distinct business units (Retail, Wholesale, Logistics). Each business unit has its own IT team and requires strict isolation. Within each business unit, they have Development, Staging, and Production environments. How should you structure the Folders and Projects?

Answer options:

A.

Create top-level Folders for Dev, Staging, and Prod. Inside each environment Folder, create Folders for the Business Units. Place Projects inside the BU Folders.

B.

Create top-level Folders for each Business Unit. Inside each BU Folder, create Folders for Dev, Staging, and Prod. Place the respective Projects inside the environment Folders.

C.

Do not use Folders. Create a single Project for each Business Unit and use VPC networks to separate Dev, Staging, and Prod.

D.

Create a separate GCP Organization for each Business Unit.

How to approach this question

Think about IAM delegation. You want to give the Retail IT team control over all Retail resources. Therefore, Retail must be the top-level folder.

Full Answer

B.Create top-level Folders for each Business Unit. Inside each BU Folder, create Folders for Dev, Staging, and Prod. Place the respective Projects inside the environment Folders.✓ Correct
Create top-level Folders for each Business Unit. Inside each BU Folder, create Folders for Dev, Staging, and Prod. Place the respective Projects inside the environment Folders.
The Resource Hierarchy should reflect the organizational structure and how IAM permissions will be delegated. By putting Business Units at the top level, you can grant the 'Retail IT Admin' role at the Retail folder level, giving them access to all Retail environments. Sub-folders for environments allow you to apply stricter Organization Policies (like restricting external IPs) to Production.

Common mistakes

Choosing option A. While grouping by environment first is common in small startups, enterprises require BU-level isolation and delegation first.

Practice the full GCP Professional Cloud Architect Practice Exam 3

50 questions · hints · full answers · grading

More questions from this exam