Google Cloud Professional Collaboration Engineer — Question 9

Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?

Answer options

• A. Establish a new GSuite tenant with their own admin for each region.
• B. Create an OU for each country. Create an admin role and assign an admin with that role per OU.
• C. Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
• D. Create a Team Drive per OU, and allow only country-specific administration of each folder.

Correct answer: B

Explanation

The correct answer is B because creating an Organizational Unit (OU) for each country allows you to assign specific administrators to manage only their respective OUs, effectively restricting their access. Option A is incorrect as establishing separate tenants would complicate management and not fulfill the requirement of having a single domain. Option C does not prevent unauthorized access; it only audits actions after they occur. Option D does not address the need for administrative control and could lead to confusion in management.