PCDOE Practice Question: Bootstrapping a Google Cloud organization for DevOps
A company is setting up a new Google Cloud organization. They want to ensure that all projects inherit common IAM policies. What is the best practice?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Apply IAM policies at the organization level.
Applying policies at the organization level ensures all projects and folders inherit them, providing consistent enforcement and reducing administrative overhead.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Apply IAM policies at the folder level.
Why it's wrong here
Folder-level policies apply to projects under that folder, but not to projects outside it.
- ✗
Apply IAM policies at the project level.
Why it's wrong here
Project-level policies do not propagate to other projects.
- ✓
Apply IAM policies at the organization level.
Why this is correct
Organization-level policies apply to all projects and folders under the organization.
- ✗
Use multiple organizations to isolate policies.
Why it's wrong here
Using multiple organizations adds complexity and is not recommended for policy inheritance.
Go deeper
Related to this question
About these practice questions
One of 486 original PCDOE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCDOE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDOE exam.