Topic 1 Question 204
All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?
Create a folder to contain all the dev projects. Create an organization policy to limit resources in US locations.
Create an organization to contain all the dev projects. Create an Identity and Access Management (IAM) policy to limit the resources in US regions.
Create an Identity and Access Management (IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.
Create an Identity and Access Management (IAM) policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.
ユーザの投票
コメント(14)
Answer A An organization policy configures a single constraint that restricts one or more Google Cloud services. The organization policy is set on an organization, folder, or project resource to enforce the constraint on that resource and any child resources. https://cloud.google.com/resource-manager/docs/organization-policy/overview
👍 4Vovtchick2023/11/09- 正解だと思う選択肢: A
Option A is the most suitable answer among the provided choices. By creating a folder to contain all the dev projects, you can organize them in a logical structure within your organization. Then, you can apply an organization policy to limit the resources in US locations. This policy can be configured to restrict the creation of cloud resources outside the United States. It provides a centralized approach to enforce the restriction across all the dev projects within the folder.
👍 3MrJkr2023/06/25 - 正解だと思う選択肢: A
Its A.
"Organization Policy" does not indicate that it will be ONLY applied to a organization, it can be applied to any resource within a organization to restrict and add conditions. This policy focus on WHAT and not WHO (IAM). So, since in this case we want to restrict to VMs in US, its clearly the option A.
Link: https://cloud.google.com/resource-manager/docs/organization-policy/overview "Identity and Access Management focuses on who, and lets the administrator authorize who can take action on specific resources based on permissions."
"Organization Policy focuses on what, and lets the administrator set restrictions on specific resources to determine how they can be configured."
👍 3joao_012023/09/22
シャッフルモード