Crucial Exams

GCP Professional Cloud Security Engineer Practice Question

Your security team must provision hundreds of Google Cloud projects each quarter. Every project needs to reside in a department-specific folder, be linked to the corporate billing account, and inherit a baseline set of IAM bindings and organization policy constraints. The team wants a repeatable, auditable workflow triggered from the company's CI/CD system and reviewed in version control before execution. Which approach delivers these capabilities with the least ongoing manual effort?

  • Write a Deployment Manager configuration that declares the folders, projects, billing accounts, IAM bindings, and organization policies, then run gcloud deployment-manager deployments create from the CI/CD pipeline.

  • Grant department administrators the Project Creator role and let them create projects in the Cloud Console, then execute a nightly gcloud script to add IAM bindings and organization policies.

  • Maintain Terraform code (for example, the Google Cloud Project Factory module) in a Git repository and have Cloud Build apply the plan, creating folders, projects, billing links, IAM bindings, and organization policies declaratively.

  • Have the Organization Admin run an interactive shell script that issues gcloud commands for each project; rely on the shell history file and Cloud Audit Logs for auditing.

GCP Professional Cloud Security Engineer
Configuring Access
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot