PCDOE Practice Question: Bootstrapping a Google Cloud organization for DevOps
A DevOps team is bootstrapping a new organization. They want to ensure that all projects created within the organization have a specific set of APIs enabled, such as Compute Engine, Cloud Storage, and Cloud Resource Manager. What is the most efficient way to achieve this?
⚠ Common exam trap
Google Cloud often tests the distinction between reactive automation (Cloud Functions) and proactive policy enforcement (Organization Policies), leading candidates to choose the more familiar event-driven approach over the declarative, built-in governance mechanism.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define an organization policy with a constraint that requires the APIs to be enabled.
Organization Policies with constraints (like `constraints/compute.requireOsLogin` or custom constraints using the Resource Manager API) allow you to enforce API enablement across all projects in the organization. This is the most efficient approach as it is declarative, centrally managed, and automatically applies to new projects without any additional infrastructure or manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a Cloud Function that triggers on project creation events and enables the required APIs.
Why it's wrong here
This is reactive and may have delay; also requires additional setup.
- ✓
Define an organization policy with a constraint that requires the APIs to be enabled.
Why this is correct
Organization policies can enforce API enablement via constraints.
- ✗
Use Cloud Foundation Toolkit to deploy a project template that includes API enablement.
Why it's wrong here
Templates don't enforce; users could choose not to use them.
- ✗
Create a shared VPC and enable the APIs in the host project only.
Why it's wrong here
Shared VPC does not enable APIs in service projects.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCDOE question from scratch — 486 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCDOE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDOE exam.