Projects as organizational units in GCP - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Project Hierarchy in GCP

Which statement best describes the role of a Project in Google Cloud Platform's organizational structure?

A A Project is a top-level container that can hold multiple organizations.

B A Project is an organizational unit that groups resources and belongs to an organization or no organization.

C A Project is a user account that manages billing and permissions across organizations.

D A Project is a billing account that controls access to multiple organizations.

💡 Hint

Think about where projects fit in the hierarchy between organizations and resources.

In GCP, a Project is a container for resources and belongs under an Organization or can exist without one. It is not a top-level container nor a user or billing account.

❓ Architecture

intermediate

Project Placement in GCP Hierarchy

You have an Organization in GCP and want to create a new Project for a team. Where should this Project be placed to follow best practices?

A Under the Billing Account node.

B Directly under the Organization node as a child.

C Under a Folder that groups multiple related Projects.

D As a sibling to the Organization node.

💡 Hint

Consider how folders help organize projects within an organization.

Folders are used to group related projects under an organization for better management. Projects cannot be siblings to organizations or placed under billing accounts.

❓ security

advanced

IAM Permissions Scope in Projects

Which statement correctly describes how IAM permissions apply within a GCP Project?

A IAM permissions granted at the Project level apply only to resources created after the permission is granted.

B IAM permissions granted at the Project level automatically apply to all Projects in the Organization.

C IAM permissions cannot be set at the Project level; they must be set on individual resources only.

D IAM permissions granted at the Project level apply to all resources within that Project, including existing and future resources.

💡 Hint

Think about inheritance of permissions within a project.

Permissions set at the Project level apply to all resources within that project, both existing and future. Permissions do not cascade across projects automatically.

✅ Best Practice

advanced

Billing Account Association with Projects

What is the best practice for associating billing accounts with Projects in GCP?

A Associate Projects with billing accounts as needed; multiple Projects can share one billing account for consolidated billing.

B Associate each Project with its own billing account to isolate costs completely.

C Associate one billing account per Organization and share it with all Projects automatically.

D Billing accounts are not linked to Projects; billing is managed at the user level.

💡 Hint

Consider how billing accounts and projects relate for cost management.

Multiple projects can share a single billing account to consolidate billing, but projects can also have separate billing accounts if isolation is needed.

❓ service_behavior

expert

Impact of Deleting a Project in GCP

What happens to the resources and services within a GCP Project when the Project is deleted?

A The Project and its resources enter a 30-day soft-delete period during which recovery is possible before permanent deletion.

B Only the Project metadata is deleted; resources continue running and billing persists.

C All resources are immediately deleted and cannot be recovered.

D Resources are transferred automatically to the Organization's default Project.

💡 Hint

Think about Google's safety measures for accidental deletions.

When a Project is deleted, it enters a 30-day soft-delete period allowing recovery. After this, resources and the project are permanently deleted.

Practice

1. What is the main purpose of a Project in Google Cloud Platform?

easy

A. To host websites directly

B. To store user passwords securely

C. To group and organize cloud resources for management

D. To replace virtual machines

Solution

1. Step 1: Understand the role of a project in GCP

   A project acts as a container to group cloud resources like storage, compute, and databases.

2. Step 2: Identify the main purpose

   Projects help organize resources for access control, billing, and tracking.

3. Final Answer:

   To group and organize cloud resources for management -> Option C

4. Quick Check:

   Project = Resource grouping [OK]

Hint: Projects group resources for easier management [OK]

Common Mistakes:

• Thinking projects store passwords
• Confusing projects with hosting services
• Assuming projects replace VMs

2. Which of the following is the correct way to create a new project using the gcloud CLI?

easy

A. gcloud create project my-project

B. gcloud project add my-project

C. gcloud new project --name my-project

D. gcloud projects create my-project

Solution

1. Step 1: Recall the gcloud command syntax for projects

   The correct command to create a project is gcloud projects create [PROJECT_ID].

2. Step 2: Match the correct syntax

   gcloud projects create my-project matches the correct syntax exactly.

3. Final Answer:

   gcloud projects create my-project -> Option D

4. Quick Check:

   gcloud projects create = create project [OK]

Hint: Use 'gcloud projects create' to make new projects [OK]

Common Mistakes:

• Using 'gcloud create project' which is invalid
• Confusing 'new project' with 'projects create'
• Using 'project add' which is not a valid command

3. Consider this code snippet using gcloud CLI commands:

gcloud projects create example-project
 gcloud config set project example-project
 gcloud services enable compute.googleapis.com

What is the effect of these commands?

medium

A. Deletes a project and disables Compute Engine API

B. Creates a project, sets it as active, and enables Compute Engine API

C. Creates a project but does not set it active or enable any services

D. Sets project configuration without creating a project

Solution

1. Step 1: Analyze each command

   gcloud projects create example-project creates the project.
   gcloud config set project example-project sets the active project.
   gcloud services enable compute.googleapis.com enables Compute Engine API.

2. Step 2: Combine the effects

   The commands create a project, make it active for future commands, and enable a key service.

3. Final Answer:

   Creates a project, sets it as active, and enables Compute Engine API -> Option B

4. Quick Check:

   Create + set + enable = Creates a project, sets it as active, and enables Compute Engine API [OK]

Hint: Create, set active, enable service in order [OK]

Common Mistakes:

• Thinking services enable deletes projects
• Ignoring the config set command
• Assuming no services are enabled

4. You try to create a project with the command gcloud projects create my-project but get an error saying the project ID is already in use. What should you do?

medium

A. Choose a different unique project ID and try again

B. Delete the existing project with the same ID immediately

C. Use the same command repeatedly until it works

D. Ignore the error and continue

Solution

1. Step 1: Understand project ID uniqueness

   Project IDs must be unique across all Google Cloud projects globally.

2. Step 2: Resolve the conflict

   If the ID is taken, pick a new unique ID and create the project again.

3. Final Answer:

   Choose a different unique project ID and try again -> Option A

4. Quick Check:

   Unique project ID required [OK]

Hint: Project IDs must be unique globally [OK]

Common Mistakes:

• Trying to delete someone else's project
• Ignoring the error and proceeding
• Repeating the same command without change

5. Your organization wants to track billing separately for different teams using GCP projects. Which approach best supports this?

hard

A. Create separate projects for each team under the organization

B. Use one project for all teams and share billing

C. Create projects without linking to the organization

D. Use folders instead of projects for billing separation

Solution

1. Step 1: Understand billing and project relationship

   Billing is tracked at the project level, so separate projects allow separate billing.

2. Step 2: Choose the best organizational structure

   Creating separate projects for each team under the organization allows clear billing and access control.

3. Final Answer:

   Create separate projects for each team under the organization -> Option A

4. Quick Check:

   Separate projects = separate billing [OK]

Hint: Use separate projects per team for billing [OK]

Common Mistakes:

• Using one project for all teams loses billing clarity
• Ignoring organization linkage
• Confusing folders with projects for billing