At which level should a company-wide policy be set?
Why D is the answer
The organization
Policies inherit downward through folders and projects.
In detail
- Organization-level policy applies everywhere below it.
- Policies inherit downward.
Use case
An illustrative scenario, not a real incident.
A security rule must apply to all projects, so it is set at the organization, and it flows down.
See it in different ways
flowchart TD A["Organization"] --> B["Folders"] B --> C["Projects"] C --> D["Resources"]
mindmap
root((Security))
Identity
Workload Identity Federation
Impersonation
Separation of duties
Data
Customer-managed keys
VPC Service Controls
Policy
Organization level
AI
Model Armorflowchart LR S0["Organization"] --> S1["Folders"] --> S2["Projects"]
Key point: Set company-wide policy at the top.
Why the other options are wrong
- A. A single VM
- A VM is one resource.
- B. One storage bucket
- A bucket is one resource.
- C. One VM instance
- One instance is one resource.