What is the principle of least privilege in the context of IAM roles?

Granting permissions at the organization level to ensure consistency

Granting permissions only to the project owner

Granting users only the permissions they need to perform their job functions

Granting all users the same level of access to simplify management

A company needs to retain logs from all its projects for 7 years for compliance. They want to store the logs in a central project with a specific retention policy. What is the most appropriate way to achieve this?

Copy logs manually from each project to the central project.

Use Cloud Monitoring to aggregate logs from all projects.

Create log sinks in each project that route logs to a BigQuery dataset in the central project.

Set a retention policy at the organization level to keep logs in each project.

Two companies are partnering on a project. Company A has a VPC in its own Google Cloud organization, and Company B has a VPC in a different Google Cloud organization. They need to allow private communication between specific workloads in each VPC without sharing any infrastructure or granting each other access to their entire networks. What is the most appropriate solution?

Use Cloud VPN to connect the two VPCs.

Export the routes from one VPC to the other using Cloud Router.

Configure VPC Network Peering between the two VPCs.

Set up a Shared VPC in one organization and attach the other's projects.

Two organizations are merging. They have separate Google Cloud organizations with overlapping IP ranges in their VPCs. They need to allow private communication between specific applications in both organizations, but they cannot change the IP ranges. What is the most appropriate solution?

Use Private Service Connect to connect the applications.

Use Cloud VPN with a NAT gateway to translate addresses.

Use VPC Network Peering with custom route exchange to selectively advertise routes, avoiding overlapping ranges.

Use Shared VPC to connect the two organizations.

What is a key benefit of the application-centric project organization pattern?

It automatically enables Shared VPC for all projects in the hierarchy

It reduces the number of projects needed, simplifying the resource hierarchy

It ensures that all environments of an application share the same project, reducing duplication

It allows each application to have its own project, making it easier to manage access and billing for that application independently

Google CloudProfessional Cloud DevOps Engineer

Domain 1Objective 1

1.1 Designing the Overall Resource Hierarchy for an Organization PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 6)

Part of the Section 1: Bootstrapping and maintaining a Google Cloud organization domain, which accounts for ~20% of the exam of the PROFESSIONAL-CLOUD-DEVOPS-ENGINEER exam.

36questions here

8free pages

13concepts

~20% of the examof the exam

Questions 26–30

26foundation · easy
What is the principle of least privilege in the context of IAM roles?
Select an answer first
27application · medium
A company needs to retain logs from all its projects for 7 years for compliance. They want to store the logs in a central project with a specific retention policy. What is the most appropriate way to achieve this?
Select an answer first
28application · medium
Two companies are partnering on a project. Company A has a VPC in its own Google Cloud organization, and Company B has a VPC in a different Google Cloud organization. They need to allow private communication between specific workloads in each VPC without sharing any infrastructure or granting each other access to their entire networks. What is the most appropriate solution?
Select an answer first
29expert · hard
Two organizations are merging. They have separate Google Cloud organizations with overlapping IP ranges in their VPCs. They need to allow private communication between specific applications in both organizations, but they cannot change the IP ranges. What is the most appropriate solution?
Select an answer first
30foundation · easy
What is a key benefit of the application-centric project organization pattern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVOPS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVOPS-ENGINEER” is a trademark of its owner, used for identification only.