CCNA Cdl Resource Management Questions — Page 2 of 2

MCQeasy

A startup wants to organize its Google Cloud resources by separating development, staging, and production environments. They also need to apply common IAM policies across all projects in each environment. Which resource hierarchy component should they use to group projects per environment?

A.Organization node

B.Tags

C.Folders

D.Labels

AnswerC

Folders are containers for projects and can be used to group projects by environment. IAM policies on folders are inherited by child projects.

Why this answer

Folders allow grouping of projects and are used to reflect organizational structure or environment separation. IAM policies applied at the folder level are inherited by all projects within that folder.

Practice this question →

MCQeasy

Which tool would you use to estimate the monthly cost of running a set of Compute Engine virtual machines before deploying them?

A.Cost Management dashboard

B.Active Assist

C.Google Cloud Pricing Calculator

D.Billing export

AnswerC

This is the correct tool for upfront cost estimation.

Why this answer

The Google Cloud Pricing Calculator allows you to estimate costs for various services before deployment.

Practice this question →

MCQeasy

An organization wants to separate billing and access control for two departments, each with multiple projects. They also need to apply common IAM policies to all projects in a department. What is the recommended way to structure their resource hierarchy?

A.Use folders under the organization node, one per department, and place projects inside them

B.Place all resources in a single project and use Cloud Identity groups for access

C.Create one project per department and use labels to separate them

D.Create separate billing accounts per department and link projects directly

AnswerA

Folders enable grouping and policy inheritance for all projects within.

Why this answer

Folders sit below the organization node and above projects. They allow grouping projects by department and applying IAM policies at the folder level, which are inherited by all projects within.

Practice this question →

Multi-Selectmedium

An organization needs to enforce that resources in a specific project cannot use certain machine series (e.g., f1-micro) due to performance requirements. They also need to tag resources with an 'environment' label for cost tracking. Which TWO methods should they use? (Choose TWO.)

Select 2 answers

A.Use resource tags (network tags) to deny f1-micro usage

B.Add a label 'environment' to each resource for cost tracking

C.Use Cloud Audit Logs to monitor f1-micro usage and manually enforce

D.Apply a deny IAM policy to prevent creation of f1-micro instances

E.Create an organization policy with a compute.disableMachineSeries constraint at the folder or project level

AnswersB, E

Labels are key-value pairs used for billing and cost attribution.

Why this answer

Organization policies (constraints) can be used to restrict resource types, including machine series. Labels are key-value metadata for cost tracking. Tags (formerly network tags) are for firewall rules, not policy enforcement.

Practice this question →

MCQhard

A team wants to enforce that resources in a specific folder must have a label with key 'cost-center' and value 'finance'. Which Google Cloud feature can enforce this requirement?

A.IAM Conditions

B.Organization policies with a constraint on labels

C.Active Assist recommendations

D.Cloud Audit Logs

AnswerB

Organization policies can enforce label requirements.

Why this answer

Organization policies can enforce constraints on labels. Using a custom organization policy, you can require that certain labels be present on resources within a folder. This is done via the 'constraints/gcp.resourceLabels' constraint.

Practice this question →

MCQmedium

A company wants to enforce a policy that prevents all projects in the organization from enabling certain Google Cloud APIs. Where should the policy be applied to ensure it is inherited by all projects, including future ones?

A.On the organization node

B.On the billing account

C.On each individual project

D.On the folder containing the projects

AnswerA

Organization node policies are inherited by all folders and projects.

Why this answer

Organization policies applied at the organization node are inherited by all folders and projects under it. This is the most efficient way to enforce a blanket restriction across the entire resource hierarchy.

Practice this question →

Multi-Selectmedium

Which TWO statements about committed use discounts (CUDs) are true? (Choose two.)

Select 2 answers

A.CUDs provide a discount for sustained usage without any upfront commitment.

B.CUDs can be purchased for specific resources such as vCPUs and memory.

C.CUDs can be applied to any Google Cloud service automatically.

D.CUDs are applied automatically without any action from the user.

E.CUDs require a 1-year or 3-year commitment.

AnswersB, E

CUDs are purchased based on resource type and amount.

Why this answer

CUDs require a commitment of 1 or 3 years and provide a discount in exchange. They apply to specific resource usage like vCPUs and memory.

Practice this question →

MCQeasy

A company has set a budget alert at 80% and 100% of $10,000 for a specific project. The project has a billing account linked. What happens when the cost reaches $8,000?

A.The project is automatically suspended.

B.All resources in the project are deleted.

C.The billing account is disabled.

D.A notification is sent to the configured Pub/Sub topic.

AnswerD

Budget alerts send notifications to Pub/Sub or email when spending exceeds thresholds.

Why this answer

Budget alerts trigger notifications at the defined threshold percentages. At $8,000 (80% of $10,000), the alert fires but does not automatically stop spending.

Practice this question →

MCQhard

A company uses folders to separate environments (dev, test, prod) and teams (eng, data, security). An engineer needs to apply a policy that disables the use of 'g1-small' machine types only in the 'dev' folder under the 'eng' folder. The organization node has no existing constraints. What is the most specific way to apply this policy?

A.Apply the policy at the organization node.

B.Apply the policy at each project individually.

C.Apply the policy at the 'dev' folder.

D.Apply the policy at the 'eng' folder.

AnswerC

Applying at the dev folder under eng restricts only that folder.

Why this answer

Organization policies can be applied at the folder level. To be specific to 'dev' under 'eng', apply the policy to the 'dev' folder. Applying at a higher level would affect other subfolders.

Practice this question →