Cloud Digital Leader How Google Cloud Resources Are Managed Practice Question
What is the primary purpose of a folder in the Google Cloud resource hierarchy?
⚠ Common exam trap
The trap is that all four options describe things that exist in Google Cloud (identities, networks, billing), so candidates pick based on keyword familiarity rather than understanding that only folders provide hierarchical grouping and policy inheritance.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To group projects and apply policies
Folders in the Google Cloud resource hierarchy sit between the organization node and projects, letting you group related projects and attach IAM policies and organization policies that are inherited by everything beneath them. This makes folders the primary tool for delegated administration and policy scoping across project boundaries.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To manage user identities
Why it's wrong here
Folders in Google Cloud are hierarchical containers for projects, not identity stores. User identities, including accounts, groups, and SSO settings, reside in Cloud Identity or Google Workspace at the organization level. IAM policies can reference these identities, but folders themselves never contain or manage user objects.
- ✗
To define network topologies
Why it's wrong here
Network topologies such as VPC networks, subnets, firewall rules, routes, and VPN tunnels are defined within project-scoped Virtual Private Cloud resources. A folder exists purely as an organizational node above projects and carries no networking configuration. Routing and packet-level controls are entirely controlled by VPC-level resources, not folder-level settings.
- ✗
To store billing information
Why it's wrong here
Billing configuration, including payment methods, invoices, and budget alerts, is attached at the billing account level, and projects are linked to that billing account for cost tracking. Folders do not own any billing attributes; they only serve to group projects for administrative purposes. Billing exports and cost breakdowns are per billing account or per project, never per folder.
- ✓
To group projects and apply policies
Why this is correct
Folders are the primary mechanism for grouping projects under an organization, enabling you to apply IAM policies, organization policies, and resource hierarchy rules at a sub-organization level. This design supports delegated management and policy inheritance, where permissions assigned to a folder flow down to all projects and resources inside it. A folder acts as a container that gives you granular control without needing to manage each project individually.
Go deeper
Related to this question
Learn chapter
Rightsizing and Resource Optimisation
Key term
Resource hierarchy
Resource hierarchy is the structured, parent-child ordering of cloud resources that governs access control, policy inheritance, and resource organization across a cloud platform.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
Courseiva writes every GCDL question from scratch — 848 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.