The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?

The correct answer ensures granular control and separation of duties. A single G Suite account is sufficient for user management across the organization. Placing each stage (development, testing, staging, production) of each application into its own project allows for the most precise application of IAM policies, enforcing a least privilege model. This structure also facilitates separation of duties, as different teams or individuals can be granted specific roles within individual projects without affecting others. Incorrect options: Creating two G Suite accounts is unnecessary and adds administrative overhead without providing additional security benefits. Consolidating all development applications into one project and all production applications into another project would violate the least privilege principle by granting broad access to all applications within that environment, making it harder to enforce separation of duties per application. Creating one project for all development/test/staging and one for all production environments suffers from the same problem as the previous incorrect option, lacking the necessary granularity for least privilege and separation of duties per application.