Google Cloud Professional Cloud Security Engineer Practice Exam

Before migrating Google Cloud projects to a new organization node, which steps are necessary?

1. Run a compliance check on all projects

2. Create new IAM roles in the destination organization

3. Identify inherited IAM roles and remove VPC Service Control settings

4. Back up all project data

The correct answer is: Identify inherited IAM roles and remove VPC Service Control settings

Identifying inherited IAM roles and removing VPC Service Control settings is crucial before migrating Google Cloud projects to a new organization node. During a migration, the new organization might have a different access control model, and IAM roles that are inherited from the previous organization may not be applicable or could lead to security misconfigurations. Ensuring that roles are appropriate for the new organizational context helps to maintain security posture. Additionally, removing VPC Service Controls settings is necessary as these settings can restrict how data and services can interact with one another post-migration. Ensuring there are no lingering configurations paves the way for a smoother migration process and reduces the chance of disruptions in service due to configuration mismatches after the migration. Other steps, such as running a compliance check on all projects, creating new IAM roles in the destination organization, or backing up all project data, may also be important in different contexts, but they do not directly address the critical concern of ensuring that security and access controls align with the new organizational structure before migration.