Cloud Digital Leader How Google Cloud Resources Are Managed Practice Question
What is the primary purpose of a folder in the Google Cloud resource hierarchy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To group projects and apply policies
Folders allow you to group projects and apply IAM policies and organization policies at a level below the organization node, enabling departmental separation and delegated administration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To manage user identities
Why it's wrong here
Folders in Google Cloud are hierarchical containers for projects, not identity stores. User identities, including accounts, groups, and SSO settings, reside in Cloud Identity or Google Workspace at the organization level. IAM policies can reference these identities, but folders themselves never contain or manage user objects.
- ✗
To define network topologies
Why it's wrong here
Network topologies such as VPC networks, subnets, firewall rules, routes, and VPN tunnels are defined within project-scoped Virtual Private Cloud resources. A folder exists purely as an organizational node above projects and carries no networking configuration. Routing and packet-level controls are entirely controlled by VPC-level resources, not folder-level settings.
- ✗
To store billing information
Why it's wrong here
Billing configuration, including payment methods, invoices, and budget alerts, is attached at the billing account level, and projects are linked to that billing account for cost tracking. Folders do not own any billing attributes; they only serve to group projects for administrative purposes. Billing exports and cost breakdowns are per billing account or per project, never per folder.
- ✓
To group projects and apply policies
Why this is correct
Folders are the primary mechanism for grouping projects under an organization, enabling you to apply IAM policies, organization policies, and resource hierarchy rules at a sub-organization level. This design supports delegated management and policy inheritance, where permissions assigned to a folder flow down to all projects and resources inside it. A folder acts as a container that gives you granular control without needing to manage each project individually.
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
Key term
IAM
Identity and Access Management (IAM) is a framework of policies and technologies that ensures the right individuals have the appropriate access to technology resources.
About these practice questions
Courseiva writes every GCDL question from scratch — 829 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.