Exercise 1: IAM Inheritance to a Brand-New Project — Possible Solution
====================================================================

GCP's real resource hierarchy applies IAM policies with automatic
downward inheritance: a role granted at the Organization level
cascades to every Folder and Project beneath it, without needing to
be configured again at each individual level.

The scenario describes a role granted at the Organization level -
the very top of the hierarchy. A brand-new Project, created later
inside a Folder that itself sits underneath that same Organization,
is a real, genuine child of that Organization in the hierarchy - even
though it didn't exist yet when the role was originally granted.

ANSWER: The IAM role granted at the Organization level automatically
applies to the new Project as well, with zero additional
configuration required - because inheritance in GCP's real hierarchy
is continuous and automatic, not a one-time snapshot taken at the
moment the role was granted. Any resource created later, anywhere
beneath that Organization, inherits the same real access
automatically.

WHY THIS WORKS AS AN ANSWER
------------------------------
This correctly identifies that GCP's real inheritance is ongoing, not
a fixed snapshot - applying to resources created after the role
assignment just as much as to resources that already existed at that
time - matching the chapter's own explicit description of how
IAM policies cascade automatically down the hierarchy.