Google Cloud Professional Cloud DevOps Engineer (PCDE)

1. A DevOps team is setting up a new Google Cloud organization for a large enterprise. They need to organize resources so that different business units have isolated billing and access control, while still allowing centralized networking. Which resource hierarchy design should they use?

2. A company's platform team needs to enable multiple application teams to deploy workloads in separate projects while sharing a common networking infrastructure managed centrally. Which Google Cloud networking approach best satisfies this requirement?

3. A platform engineer needs to connect two separate Google Cloud VPC networks that belong to different projects in the same organization. The teams require private IP communication between services with minimal latency and no traversal of the public internet. The networks do not have overlapping CIDR ranges. Which solution should be used?

4. A security administrator needs to enforce that no user across any project in the Google Cloud organization can disable Cloud Audit Logs for data access events. They want this constraint applied consistently without requiring per-project configuration. What is the correct approach?

5. A team is deploying a new microservice on Google Kubernetes Engine. The service must authenticate to Cloud Storage and Cloud Pub/Sub without embedding static credentials in the container image. What is the recommended approach for providing credentials to the workload?