Google Cloud Associate Cloud Engineer — Question 252

You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to comply with your company's security policies. The security policies are different for each company department. Each company department has a user with the Project Owner role assigned to their projects. What should you do?

Answer options

• A. Use a standard naming convention for projects that includes the department name. Configure organization policies on the organization and log sinks on the projects.
• B. Use a standard naming convention for projects that includes the department name. Configure both organization policies and log sinks on the projects.
• C. Organize projects under folders for each department. Configure both organization policies and log sinks on the folders.
• D. Organize projects under folders for each department. Configure organization policies on the organization and log sinks on the folders.

Correct answer: C

Explanation

The correct answer is C because organizing projects into folders allows for the implementation of organization policies and log sinks that can be uniformly applied and managed without interference from project users. Options A and B fail to provide the necessary enforcement across departments, while option D does not allow for the flexibility and specificity required for different departmental policies at the project level.