Google ACE Setting Up a Cloud Solution Environment Practice Question
A company wants to organize their GCP resources into a hierarchy to separate development, staging, and production environments. Which THREE resources can be used to create this separation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Folders
GCP resource hierarchy includes Organization, Folders, Projects, and Resources. Folders can be used to group projects (e.g., dev folder, prod folder). Projects are the containers for resources. Labels are metadata tags but not part of the hierarchy. Billing accounts are separate from the hierarchy. IAM policy is not a resource for separation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Folders
Why this is correct
Folders are hierarchical containers that sit between the organization node and projects, allowing you to group projects based on business units, teams, or deployment stages (e.g., development, staging, production). As nodes in the resource hierarchy, folders inherit policies from the organization node and propagate their own IAM policies and resource constraints to all projects and folders underneath them, making them a correct and essential component for organizing GCP resources.
- ✓
Organization node
Why this is correct
The organization node is the root of the GCP resource hierarchy and represents your entire organization. It is the top-level container that holds all folders, projects, and resources, and it provides a central place to apply enterprise-wide IAM policies, organization policies, and audit logs. This node is automatically created when you create a Cloud Identity or Google Workspace account, and it is a correct component of the hierarchy.
- ✗
Billing accounts
Why it's wrong here
Billing accounts are not part of the resource hierarchy; they are separate financial entities that track and pay for resource usage across projects. A project must be linked to a billing account to use paid services, but the billing account exists outside the folder/project organizational structure. Therefore, while billing accounts are important for cost management, they cannot be used to organize GCP resources and are incorrect as a hierarchy component.
- ✓
Projects
Why this is correct
Projects are the fundamental containers within the GCP resource hierarchy, holding all GCP services, APIs, and resources such as Compute Engine instances and Cloud Storage buckets. Each project belongs to exactly one folder or the organization node, and IAM policies defined on the project apply to all resources inside it. Projects are a required and correct level of the hierarchy, enabling resource isolation, quota management, and access control.
- ✗
Labels
Why it's wrong here
Labels are key-value pairs that can be applied to resources like VMs and storage buckets for metadata, cost allocation, and filtering (e.g., environment=production, team=finance). They are not part of the resource hierarchy and do not provide a container for grouping projects or other resources. Unlike folders, labels cannot inherit IAM policies or define organizational structure, making them an incorrect option for organizing GCP resources into a hierarchy.
Go deeper
Related to this question
Learn chapter
GCP IAM and Service Accounts
Key term
Folder
A folder is a logical container used to organize and group digital files, resources, or cloud-based assets within a system or platform.
Key term
IAM policy
An IAM policy is a set of rules that determines who can access specific cloud resources and what actions they are allowed to perform.
About these practice questions
This ACE question is part of Courseiva's 769-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.