Hierarchical Cloud Structures GCAD Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A company is designing a cloud hierarchy for a large enterprise with many business units. They want to minimize the number of policies that need to be maintained while still allowing each business unit to have some flexibility. What is the best approach?

   • AAttach all policies at the organization level and do not allow any lower-level policies.
   • BAttach common policies at the organization level and allow business units to add more specific policies at their folder level.
   • CAttach all policies at the project level to give each project maximum flexibility.
   • DCreate a separate organization for each business unit.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has a folder for the Finance department and a folder for the Engineering department. They want to ensure that Finance users cannot access Engineering resources, while Engineering users can access Finance resources only for read-only reporting. What is the best way to configure IAM roles in this hierarchy?

   • AGrant Finance users a deploy role on the Engineering folder and Engineering users a deploy role on the Finance folder.
   • BGrant Finance users a view role on the Engineering folder and Engineering users a view role on the Finance folder.
   • CGrant Finance users no access to the Engineering folder and Engineering users a view role on the Finance folder.
   • DGrant Finance users a view role on the Engineering folder and Engineering users no access to the Finance folder.
   Reveal Solution Discussion Select an answer first