Hierarchical Cloud Structures GCAD Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How can a hierarchical structure help with billing management?

   • ABy automatically paying all invoices from a single account
   • BBy allowing costs to be aggregated and reported at the folder or project level
   • CBy eliminating all charges for resources in lower levels
   • DBy providing a discount for every resource in the hierarchy
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key advantage of assigning IAM roles at the folder level rather than individually to each project?

   • AIt automatically rotates credentials for all users
   • BIt reduces administrative overhead and ensures consistent access across projects
   • CIt prevents any user from having access to resources outside the folder
   • DIt eliminates the need for any other IAM policies
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is it recommended to limit the number of levels in a cloud hierarchy?

   • ATo reduce the complexity of policy inheritance and make troubleshooting easier
   • BTo increase the performance of cloud resources
   • CTo ensure that all resources are in the same geographic region
   • DTo reduce the cost of cloud services
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company organizes its cloud resources under a single organization node, with separate folders for each business unit. The security team attaches an organization-level IAM policy that denies all users the ability to delete any cloud resource. A business unit folder has a policy that grants its own administrators the delete permission on resources in that folder. What is the effective result for a user who is a folder-level administrator?

   • AThe user can delete resources only if the folder-level grant is also attached at the organization level.
   • BThe user can delete resources in the folder because the folder-level grant overrides the organization-level deny.
   • CThe user can delete resources only if the folder-level grant is denied at the project level.
   • DThe user cannot delete resources in the folder because the organization-level deny takes precedence over the folder-level grant.
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A company is moving to a cloud environment and wants to organize resources so that billing, access control, and policy enforcement are managed consistently. They are considering a hierarchical structure. What is the primary benefit of using a hierarchical cloud structure over a flat list of projects?

   • AIt allows resources to be grouped and managed through inheritance of policies and permissions.
   • BIt eliminates the need for IAM roles entirely.
   • CIt guarantees that all resources are in the same geographic region.
   • DIt automatically encrypts all data at rest.
   Reveal Solution Discussion Select an answer first