Exam Professional Cloud Architect topic 1 question 37 discussion

https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations I will stick with C

The reason it isn't D is that a Dept modelled as a project puts a massive constraint on the dept that they can only have a single project, it's likely a department will want many projects.

1. Centralized Control: A single organization provides a central point for managing all your Google Cloud resources and IAM policies. This simplifies administration and ensures consistency across your organization. 2. Independent Department Management: Folders allow you to group projects within your organization and delegate administrative control to different departments. Each department can manage its own IAM policies within its assigned folder, providing the necessary independence. 3. Hierarchical Structure: Folders provide a hierarchical structure for organizing your resources. You can create sub-folders within departments for further granularity and control. 4. Efficient Resource Management: This structure makes it easier to manage resources, track costs, and enforce security policies across your organization.

B

Clearly C

Is obviously C

C. A single Organization with Folders for each department To control IAM policies for different departments independently but centrally, you should create a single organization and use folders to organize the policies for each department. This approach allows you to centralize the management of IAM policies for all departments within a single organization, while also allowing you to set up different policies for each department as needed. Option A, multiple organizations with multiple folders, would not be an effective solution because it would create unnecessary complexity and make it more difficult to centralize the management of IAM policies. Option B, multiple organizations, one for each department, would also not be an effective solution because it would create unnecessary complexity and make it more difficult to centralize the management of IAM policies. Option D, a single organization with multiple projects, each with a central owner, would not be an effective solution because it would not allow you to set up different policies for each department as needed.

C. It's a best practice and I've done this with my previous and current company :)

.............

C single org and multiple folders

C is the right answer

Will go for C

Go for C

C is the right answer

C shall be the correct answer

C. Seems to be best practice (cf AWS56). And I believe that D should be excluded because it says "Project owner" - it is not best practice since it's a basic role + it's not even stated as a requisite

C. A single Organization with Folders for each department