PCDOE Practice Question: Bootstrapping a Google Cloud organization for DevOps
You are bootstrapping a Google Cloud organization. You need to set up a hierarchical structure that allows you to apply policies to groups of projects based on their environment (e.g., development, staging, production). What is the recommended way to organize resources?
⚠ Common exam trap
Google Cloud often tests the distinction between metadata (tags/labels) and hierarchical policy inheritance (folders), leading candidates to choose tags or labels because they seem simpler, but folders are the only mechanism that provides automatic, inheritable policy enforcement across groups of projects.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create folders under the organization for each environment and place projects in the appropriate folder.
Google Cloud's resource hierarchy (Organization -> Folders -> Projects) is specifically designed to group projects by environment and apply consistent policies (e.g., IAM, organization policies) at the folder level. By creating folders for development, staging, and production, you can enforce environment-specific controls (like VPC Service Controls or resource location restrictions) without duplicating policies per project.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use resource tags to label projects by environment and apply policies via tag-based conditions.
Why it's wrong here
Tags can be used for conditions but not for hierarchical policy enforcement.
- ✓
Create folders under the organization for each environment and place projects in the appropriate folder.
Why this is correct
Folders allow hierarchical policy inheritance and grouping.
- ✗
Create separate organizations for each environment.
Why it's wrong here
Organizations are not meant for environment separation; it's costly and complex.
- ✗
Use labels on projects to identify environments and then use Cloud Asset Inventory to enforce policies.
Why it's wrong here
Labels are metadata, not a mechanism for applying policies hierarchically.
Go deeper
Related to this question
About these practice questions
This PCDOE question is part of Courseiva's 486-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCDOE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDOE exam.