Cloud Digital Leader How Google Cloud Resources Are Managed Practice Question
An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?
⚠ Common exam trap
GCDL often tests the confusion between organization, folder, and project levels — candidates pick the organization node for business-unit grouping when folders are the correct scoped grouping mechanism.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Folder
Folders are the GCP resource hierarchy level designed to group projects under a common parent, enabling policy inheritance (IAM, Org Policy) and cost aggregation for a business unit. A folder can contain projects and other folders, forming a tree under the organization node. This makes folders the correct choice for grouping several projects belonging to the same business unit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Organization node
Why it's wrong here
The organization node is the root of the GCP resource hierarchy and is designed for organization-wide governance, such as defining globally applicable IAM policies, audit logging, and VPC Service Controls. It does not function as a grouping container for related projects; instead, it serves as a single top-level administrative boundary. Using it to group projects by team or environment would conflate organization-level governance with project organization, and it cannot provide the independent, sub-hierarchical structure needed for project grouping.
- ✓
Folder
Why this is correct
Folders are hierarchical containers that live beneath an Organization node and above Projects, specifically designed to group related projects. They also support nested sub-folders, enabling you to mirror your company's structure or deployment environments (e.g., dev, staging, prod). Policies and IAM roles assigned to a folder are inherited by all projects and resources inside it, making them a first-class administrative boundary for access control and isolation. This is exactly the correct mechanism for grouping related projects while preserving policy inheritance.
- ✗
Project
Why it's wrong here
A project is the base-level container that holds all of your GCP resources, such as Compute Engine instances, Cloud Storage buckets, and BigQuery datasets. It is an isolated unit with its own IAM policy, quotas, and billing account, and it cannot contain other projects as children. While projects can be linked through Shared VPC or organization policies, the project itself is not a hierarchical grouping construct; rather, it is the level at which resources are managed and monitored.
- ✗
Resource
Why it's wrong here
In GCP, the term 'resource' refers to the individual services you provision, such as a virtual machine, a storage bucket, or a Cloud SQL instance. These resources reside inside projects and are the finest-granularity entities in the hierarchy; they have no capability to contain or organize other resources or projects. Resources inherit policies from their parent project or folder, but they cannot act as grouping containers, making them entirely unsuitable for the requirement to group related projects.
Go deeper
Related to this question
Learn chapter
Data-Driven Decision Making in Business
Key term
Policy inheritance
Policy inheritance is the mechanism by which policies applied to a parent container in a hierarchical system automatically apply to all child objects within that container, unless explicitly blocked or overridden.
Key term
IAM
Identity and Access Management (IAM) is a framework of policies and technologies that ensures the right individuals have the appropriate access to technology resources.
About these practice questions
Courseiva writes every GCDL question from scratch — 848 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.