1
Single choice~90s
A platform team must provision hundreds of projects with consistent IAM, networking, logging, and labels, repeatably and reviewably. Which approach fits BEST?
Professional Cloud DevOps Engineer
GCP_PCDEReady to test yourself?
A timed, blueprint-proportional exam drawn fresh from this bank — with a per-domain score report.
🔓 Free preview: showing 10 of 50 questions. Unlock the full bank — every question, explanation, and reference.
Unlock all 50 questions →10 questions across 5 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
9 questions in Bootstrapping a Google Cloud organization for DevOps
BOOTSTRAP_ORG
Bootstrapping a Google Cloud organization for DevOps
9 questions in topicResource hierarchy, IAM, Infrastructure as Code, org policies, and landing zones.
2
Single choice~90s
Security must enforce org-wide guardrails (no external IPs, restricted locations, no service-account key creation) regardless of project owners' IAM. Which mechanism fits?
3
Single choice~70s
A company wants IAM and org policies applied once and inherited by 40 projects owned by one team. What should they use?
4
Single choice~90s
Following least privilege in production, how should access be granted to engineers with the least ongoing maintenance?
5
Single choice~100s
A GKE workload needs Google API access following best practice with no long-lived keys. What should be configured?
6
Single choice~90s
During a Sev-1 incident, an on-call engineer occasionally needs elevated access they don't normally hold. What is the recommended pattern?
7
Single choice~90s
To limit blast radius and apply different access/policies, how should dev, staging, and prod be separated?
8
Single choice~90s
Security wants all organization logs routed to one destination for retention and SIEM analysis. Which feature should be used?
9
Multiple selectSelect 2 answers~90s
Which two are best practices when bootstrapping a Google Cloud organization for DevOps? (Choose two.)