Google ACE Setting Up a Cloud Solution Environment Practice Question
A Cloud Architect needs to understand the GCP resource hierarchy to set up proper access control. Which three resources are part of the GCP resource hierarchy? (Choose THREE.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Folder
The GCP resource hierarchy includes Organization, Folder, Project, and Resources (like VMs). Cloud Identity and Billing Account are separate services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Billing Account
Why it's wrong here
Billing accounts are not nodes in the GCP resource hierarchy; they operate as separate external entities linked to projects for cost tracking and payment. A single billing account can be attached to many projects and sits at a level independent of Organization, Folders, and Projects. The hierarchy only governs resource containment and policy inheritance, not financial management, so billing accounts are not a hierarchical component.
- ✓
Folder
Why this is correct
Folders are correct because they serve as intermediate grouping nodes within the resource hierarchy, sitting directly below an Organization and above Projects. They allow you to group teams, products, or departments and apply IAM policies and organization policies at that group level, which are inherited by all contained projects. Folders can also nest other folders, enabling multi-level administrative boundaries that align with corporate structure.
- ✓
Project
Why this is correct
Projects are correct because they are the fundamental container in the GCP hierarchy that directly hold all resources such as Compute Engine instances, Cloud Storage buckets, and Kubernetes clusters. Every resource must belong to exactly one project, and projects act as the primary boundary for IAM permissions, Quotas, and billing usage. Projects are organized under folders or the organization root, and they are the level where most day-to-day resource access control is applied.
- ✓
Organization
Why this is correct
The Organization node is correct because it is the root of the entire GCP resource hierarchy, representing the company as a whole and providing a centralized point for policy administration. It is automatically created when you sign up for Google Workspace or Cloud Identity, and it grants Organization Administrators visibility and control over every folder, project, and resource in the account. IAM policies set at this level inherit down to all descendants, making it the highest authority for resource management.
- ✗
Cloud Identity
Why it's wrong here
Cloud Identity is incorrect because it is an identity-as-a-service (IDaaS) platform that supplies user accounts, groups, and SSO configuration, but it is not a container within the resource hierarchy. The resource hierarchy consists solely of Organization, Folders, Projects, and resources; Cloud Identity provides the principals (users/groups) that are referenced in IAM policies. Therefore, it exists alongside the hierarchy as an identity source, not as a structural node.
Go deeper
Related to this question
Learn chapter
Google Cloud Platform Overview
Key term
Resource hierarchy
Resource hierarchy is the structured, parent-child ordering of cloud resources that governs access control, policy inheritance, and resource organization across a cloud platform.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
Courseiva writes every ACE question from scratch — 769 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.