Associate Cloud Engineer · Free Practice Question Medium
Question 6
To avoid potentially violating a regulation, your company has determined that it will only use GCP resources in North America. How would you ensure no resources are created outside of North America?
- A Create a policy at the folder level of the resource hierarchy that includes a constraint using a Resource Location Restriction.
- B Create an Cloud Audit policy that prevents users from creating resources outside of North America.
- C Create a policy at the organization level of the resource hierarchy that includes a constraint using a Resource Location Restriction.
- D Create a data lifecycle management policy that prevents data from being saved outside of North America.
Reveal correct answer
Correct answer: C
Explanation
Constraints are the standard way to restrict where resources can be created and applying policies with constraints will enforce those constraints for all resources in the organization. If the policy were applied at the folder level, it would have to be applied for all folders and that is not as efficient as applying at the organization level. There is no such thing as a Cloud Audit policy. For more information, see https://cloud.google.com/resource-manager/docs/organization-policy/defining-locations.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
