Google Cloud Associate Cloud Engineer — Question 295

You assist different engineering teams in deploying their infrastructure on Google Cloud. Your company has defined certain practices required for all workloads. You need to provide the engineering teams with a solution that enables teams to deploy their infrastructure independently without having to know all implementation details of the company’s required practices. What should you do?

Answer options

• A. Configure organization policies to enforce your company's required practices. Ask the teams to provision their infrastructure by using the Google Cloud console.
• B. Create a service account per team, and grant the service account the Project Editor role. Ask the teams to provision their infrastructure through the Google Cloud CLI (gcloud CL), while impersonating their dedicated service account.
• C. Write Terraform modules for each component that are compliant with the company's required practices, and ask teams to implement their infrastructure through these modules.
• D. Provide training for all engineering teams you work with to understand the company’s required practices. Allow the engineering teams to provision the infrastructure to best meet their needs.

Correct answer: C

Explanation

The correct answer is C because creating Terraform modules allows teams to deploy infrastructure that complies with the company's guidelines without needing to understand all the details. Option A relies on the teams using the Google Cloud console, which does not ensure compliance effectively. Option B provides high-level access but does not enforce the required practices. Option D, while helpful, does not provide a direct solution for compliance during deployment.