Resources and Access in Google Cloud

1.

Question 1

When would you choose to have an organization node? (Select two)

1 / 1 point

When you want to create folders

Correct

Correct! Folders require an organization node

When you want to organize resources into projects

When you want to centrally apply organization-wide policies

Correct

Correct! Organization nodes let you apply policies centrally.

There’s no choice; organization nodes are mandatory.

2.

Question 2

Which statement best describes how Google Cloud resources are associated within the resource hierarchy?

1 / 1 point

All Google Cloud resources are associated with a project.

All Google Cloud resources are associated with a folder.

All Google Cloud resources are associated with an organization.

Google Cloud resources are not associated with the resource hierarchy.

Correct

Correct! All Google Cloud resources are associated with a project.

3.

Question 3

Consider a single hierarchy of Google Cloud resources. Which of these situations is possible? (Choose 3 responses.)

1 / 1 point

There is no organization node, and there are no folders.

Correct

Correct!

There is no organization node, but there is at least one folder.

There is an organization node, and there are no folders.

Correct

Correct!

There is an organization node, and there is at least one folder.

Correct

Correct!

There are two or more organization nodes.

4.

Question 4

Your company has two Google Cloud projects and you want them to share policies. What is the least error-prone way to set this up?

1 / 1 point

Duplicate all the policies from one project onto the other.

Place both projects into a folder, and define the policies on that folder.

Create shared resource policies on the common resources that are used in both projects.

Define the new shared policy in the organization node.

Correct

That's correct!

5.

Question 5

What is the difference between Identity and Access Management (IAM) basic roles and IAM predefined roles?

1 / 1 point

Basic roles affect all resources in a Google Cloud project. Predefined roles apply to a specific service in a project.

Basic roles only allow viewing, creating, and deleting resources. Predefined roles allow any modification.

Basic roles only apply to the owner of the Google Cloud project. Predefined roles can be associated with any user.

Basic roles can only be granted to single users. Predefined roles can be associated with a group.

Correct

Correct!

6.

Question 6

Select the option that displays IAM roles from general to specific.

1 / 1 point

Basic roles, predefined roles, custom roles

Custom roles, predefined roles, basic roles

Predefined roles, custom roles, basic roles

Correct

Correct!

7.

Question 7

How does the resource hierarchy control how IAM policies are inherited?

1 / 1 point

IAM policies that are implemented higher in the resource hierarchy deny access that is granted by lower-level policies.

IAM policies that are implemented by lower-level policies can override the policies defined at a higher level.

IAM policies are only implemented at the project level; they cannot be amended by lower levels of the resource hierarchy.

Correct

Correct!

8.

Question 8

Which way of accessing Google Cloud lets you control services through the code you write?

1 / 1 point

The Cloud Console

The Cloud SDK and Cloud Shell

APIs

The Cloud Console mobile app

Correct

Correct!