To simplify access control, a company wants administrators to set IAM policies once and have them inherited by all current and future production projects. Which Google Cloud resource hierarchy capability best meets this need?
Enable Cloud Audit Logs at the organization level to automatically block unauthorized actions.
Apply consistent labels to production resources and rely on them to enforce IAM policies.
Use a separate billing account for production projects and attach IAM roles to the billing account.
Create a dedicated folder for production projects and grant IAM roles on that folder.
In Google Cloud's resource hierarchy, folders let you group related projects. When you attach an IAM policy to a folder, that policy is automatically inherited by every project and resource inside the folder, including any projects that are created there later. Labels only add metadata and do not enforce permissions, Cloud Audit Logs record actions but do not restrict them, and billing accounts control payment rather than resource-level access. Therefore, using a dedicated folder for production projects and assigning IAM roles at the folder level is the correct way to ensure consistent, inherited access control.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Google Cloud resource hierarchy?
Open an interactive chat with Bash
How do IAM policies work within the Google Cloud hierarchy?
Open an interactive chat with Bash
What are Cloud Audit Logs, and why can’t they enforce access control?
Open an interactive chat with Bash
What is IAM in Google Cloud?
Open an interactive chat with Bash
How do folders work in the Google Cloud resource hierarchy?
Open an interactive chat with Bash
Why can't labels enforce IAM policies?
Open an interactive chat with Bash
GCP Cloud Digital Leader
Scaling with Google Cloud Operations
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .