Cloud Digital Leader How Google Cloud Resources Are Managed Practice Question
An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Folder
Folders are used to group projects (and other folders) into a hierarchy for applying policies and organizing resources by department, team, or environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Organization node
Why it's wrong here
The organization node is the root of the GCP resource hierarchy and is designed for organization-wide governance, such as defining globally applicable IAM policies, audit logging, and VPC Service Controls. It does not function as a grouping container for related projects; instead, it serves as a single top-level administrative boundary. Using it to group projects by team or environment would conflate organization-level governance with project organization, and it cannot provide the independent, sub-hierarchical structure needed for project grouping.
- ✓
Folder
Why this is correct
Folders are hierarchical containers that live beneath an Organization node and above Projects, specifically designed to group related projects. They also support nested sub-folders, enabling you to mirror your company's structure or deployment environments (e.g., dev, staging, prod). Policies and IAM roles assigned to a folder are inherited by all projects and resources inside it, making them a first-class administrative boundary for access control and isolation. This is exactly the correct mechanism for grouping related projects while preserving policy inheritance.
- ✗
Project
Why it's wrong here
A project is the base-level container that holds all of your GCP resources, such as Compute Engine instances, Cloud Storage buckets, and BigQuery datasets. It is an isolated unit with its own IAM policy, quotas, and billing account, and it cannot contain other projects as children. While projects can be linked through Shared VPC or organization policies, the project itself is not a hierarchical grouping construct; rather, it is the level at which resources are managed and monitored.
- ✗
Resource
Why it's wrong here
In GCP, the term 'resource' refers to the individual services you provision, such as a virtual machine, a storage bucket, or a Cloud SQL instance. These resources reside inside projects and are the finest-granularity entities in the hierarchy; they have no capability to contain or organize other resources or projects. Resources inherit policies from their parent project or folder, but they cannot act as grouping containers, making them entirely unsuitable for the requirement to group related projects.
Go deeper
Related to this question
Learn chapter
Cloud vs On-Premises Total Cost Analysis
Key term
Policy enforcement
Policy enforcement is the process of implementing and ensuring compliance with defined security rules and configurations across an IT environment.
Key term
Resource hierarchy
Resource hierarchy is the structured, parent-child ordering of cloud resources that governs access control, policy inheritance, and resource organization across a cloud platform.
About these practice questions
Courseiva writes every GCDL question from scratch — 829 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.