Hierarchical Cloud Structures GCAD Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A healthcare company must ensure that all cloud resources containing protected health information (PHI) are located in a specific geographic region. They also need to enforce encryption for all PHI data. How should they map these compliance requirements to their cloud hierarchy?

   • AAttach the location policy at the project level and the encryption policy at the folder level.
   • BAttach the location policy only to the folder that contains PHI resources.
   • CAttach a location-restriction policy and an encryption policy at the organization level so they apply to all resources.
   • DAttach the encryption policy only to the project that currently stores PHI.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a direct benefit of organizing cloud resources into a hierarchy?

   • AGuaranteed performance improvement for all workloads
   • BSimplified management of access controls and billing across many resources
   • CAutomatic backup of all resources in the hierarchy
   • DElimination of the need for resource-level tags
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the benefit of aligning cloud hierarchy folders with organizational business units?

   • AIt automatically ensures all business units have identical security postures
   • BIt guarantees compliance with all international regulations
   • CIt allows governance policies to be applied based on the business unit's specific requirements
   • DIt eliminates the need for any additional governance controls
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of a hierarchical cloud structure?

   • ATo provide a logical framework for organizing cloud resources and applying governance consistently across them
   • BTo replace identity and access management (IAM) with a simpler folder-based permission system
   • CTo physically isolate each cloud resource in its own dedicated hardware environment
   • DTo automatically replicate data across multiple geographic regions for disaster recovery
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has an organization-level policy that grants all employees read access to all projects. A project-level policy denies a specific contractor read access to that project. What is the effective access for the contractor?

   • AThe contractor has read access because the organization-level grant is broader.
   • BThe contractor has read access only if the project-level deny is removed.
   • CThe contractor does not have read access because the project-level deny overrides the organization-level grant.
   • DThe contractor has read access only if the organization-level grant is also denied.
   Reveal Solution Discussion Select an answer first