What is the primary purpose of creating folders in a Google Cloud resource hierarchy?

To enable VPC Network Peering between projects

To group projects and apply organization policies and IAM roles consistently across them

To provide a separate login domain for each business unit

To create separate billing accounts for different departments

What is a key benefit of using Private Service Connect over accessing Google services via public IP addresses?

It allows you to use any region for the Google service

Traffic stays within the Google Cloud network, reducing exposure to the public internet

It automatically scales the Google service to meet demand

It eliminates the need for IAM permissions to access Google services

A team has a service account that is used by a production application. The application is being decommissioned, and the team wants to ensure the service account cannot be used anymore. What is the most appropriate first step?

Revoke all IAM roles from the service account.

Rotate the service account keys.

A company has a folder for each environment (dev, staging, prod). They want to grant a team of developers the ability to deploy applications to the dev folder, but not to staging or prod. They also want to ensure that the developers cannot modify IAM policies in the dev folder. What is the most appropriate IAM role assignment?

Grant the developers a custom role on the dev folder that includes only the permissions needed for deployment.

Grant the developers the roles/owner role on the dev folder.

Grant the developers the roles/editor role on the dev folder.

Grant the developers the roles/viewer role on the dev folder.

What is the primary purpose of VPC Network Peering?

To share a single VPC network across multiple projects

To connect an on-premises network to a VPC network

To allow a VPC network to access the internet

To connect two VPC networks so that they can communicate using private IP addresses

Google CloudProfessional Cloud DevOps Engineer

Domain 1Objective 1

1.1 Designing the Overall Resource Hierarchy for an Organization PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 4)

Part of the Section 1: Bootstrapping and maintaining a Google Cloud organization domain, which accounts for ~20% of the exam of the PROFESSIONAL-CLOUD-DEVOPS-ENGINEER exam.

36questions here

8free pages

13concepts

~20% of the examof the exam

Questions 16–20

16foundation · easy
What is the primary purpose of creating folders in a Google Cloud resource hierarchy?
Select an answer first
17foundation · easy
What is a key benefit of using Private Service Connect over accessing Google services via public IP addresses?
Select an answer first
18application · medium
A team has a service account that is used by a production application. The application is being decommissioned, and the team wants to ensure the service account cannot be used anymore. What is the most appropriate first step?
Select an answer first
19expert · hard
A company has a folder for each environment (dev, staging, prod). They want to grant a team of developers the ability to deploy applications to the dev folder, but not to staging or prod. They also want to ensure that the developers cannot modify IAM policies in the dev folder. What is the most appropriate IAM role assignment?
Select an answer first
20foundation · easy
What is the primary purpose of VPC Network Peering?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVOPS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVOPS-ENGINEER” is a trademark of its owner, used for identification only.