Get Your CertGoogle Cloud Associate Cloud EngineerPlayCompete
‹ All Google Cloud Associate Cloud Engineer questions

GCP Associate Cloud Engineer Practice Question 29: Org Policy Resource Locations

Google Cloud Associate Cloud Engineer · Test 3 · question 9 of 10

Organization Policymedium

To meet data residency rules, your company must ensure that no team can create Google Cloud resources outside the European Union in any project of the organization.

What should you do?

Select one answer
Show answer and explanation

Answer:

  • A. Set the organization policy constraint for resource locations at the organization node, allowing only EU locations

The gcp.resourceLocations organization policy constraint limits the locations where supported resources can be created. Setting it at the organization node with an allowed value such as in:eu-locations is inherited by every folder and project and blocks creation elsewhere at request time.

Option B does not work because location is not a permission; roles cannot filter by region. Option C only detects the violation after the resource exists, so the data would already be in the wrong place. Option D controls network traffic and cannot prevent resource creation.

Reference: Restricting resource locations

Practice Test 3 ›

Study guides for Google Cloud Associate Cloud Engineer

Google Cloud Digital Leader exam: what's on it, who it's forGoogle Cloud Digital Leader: August 2026 exam update, six sections, US$99 price as of November 2026, renewal, study plan and ACE comparison.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Google Cloud certification path: is ACE worth it?Is Google's Associate Cloud Engineer certification worth it? The Google Cloud certification path in 2026, with cost, format and which exam to take first.
GCP IAM roles, service accounts and keyless accessBasic, predefined and custom roles in Google Cloud IAM, how grants inherit down the hierarchy, and how to use service accounts without keys.