Chapter 1 of 5 · Google Cloud Professional Cloud DevOps Engineer
Bootstrapping and maintaining a Google Cloud organization
Resource hierarchy, Shared VPC, IaC, CI/CD design, environments and dev workstations.
- 6topics
- 31 minfast track
- 1diagrams and exhibits
- 20%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Resource Hierarchy, IAM, Organization Policies and Service AccountsDesign a Google Cloud resource hierarchy with folders and projects, IAM and organization policies, service accounts and data…5 min
- 2Shared VPC, Peering, Private Service Connect and Central ObservabilityChoose between Shared VPC, VPC Network Peering and Private Service Connect, and set up metrics scopes and aggregated log sinks…5 min
- 3Infrastructure as Code, Blueprints and Automation ScriptsManage Google Cloud infrastructure with Terraform, Infrastructure Manager, Cloud Foundation Toolkit, Config Connector, GitOps…5 min
- 4CI/CD Architecture with Cloud Build, Cloud Deploy and Artifact RegistryDesign a CI/CD stack on Google Cloud: Cloud Build, Cloud Deploy with Skaffold and Kustomize, Artifact Registry, third-party tools…Diagram6 min
- 5Multiple Environments, GKE Fleets, Patching and UpgradesManage staging and production on Google Cloud: ephemeral environments, config and policy, GKE fleets, release channels and safe…5 min
- 6Cloud Workstations, Cloud Shell and Gemini for Developers and OperatorsSet up secure developer environments with Cloud Workstations and Cloud Shell, custom images and tooling, and Gemini Code Assist…5 min
About this chapter
What this chapter covers
Bootstrapping and maintaining a Google Cloud organization is about 20% of the Google Cloud Professional Cloud DevOps Engineer exam. It covers the foundation every pipeline and service later runs on: how the organization is laid out, how infrastructure is created, and how teams get safe places to build.
It covers the resource hierarchy (folders, projects, IAM, organization policies, service accounts, data residency), shared networking and central observability (Shared VPC, VPC Network Peering, Private Service Connect, metrics scopes and aggregated sinks), infrastructure as code (Terraform, Infrastructure Manager, Cloud Foundation Toolkit, Config Connector, GitOps, Helm, scripting), the CI/CD architecture stack (Cloud Build, Cloud Deploy with Skaffold and Kustomize, Artifact Registry, third-party tools), multiple environments (ephemeral environments, configuration and policy, GKE fleets, patching and upgrades) and secure development environments (Cloud Workstations, Cloud Shell, Gemini assistants).
The exam has 50 to 60 multiple choice and multiple select questions in 2 hours. Questions here are usually scenarios ending "What should you do?", and the right answer is the managed, repeatable, least-privilege option rather than a manual fix.
How the topics fit together
The hierarchy decides where permissions, policies and costs land. Everything after it should be created by code and pipelines, so environments stay consistent and changes are reviewed.
When two answers both work, pick the one that scales across many projects: a folder-level policy, an aggregated sink, a blueprint or a fleet feature beats repeating the same step per project.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and code examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Google Cloud Professional Cloud DevOps Engineer question bank has 751 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Google Cloud. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.