QUESTION: 153 Exam Topic: 2, Exam Pool B

You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice.
What should you do?

Grant the financial team the IAM role of Billing Account User on the billing ac-count linked to your credit card.
Change the billing account of your projects to the billing account of your company.
Create a ticket with Google Billing Support to ask them to send the invoice to your company.
Set up BigQuery billing export and grant your financial department IAM access to query the data.

Answer(s): B

Explanation:

To change the Cloud Billing account for a project, you need to be able to move a project from one Cloud Billing account to another. To accomplish this task, you need permissions adequate to unlink the project from the existing Cloud Billing account AND to link the project to the target Cloud Billing account. Roles with adequate permissions to perform this task: Project Owner or Project Billing Manager on the project, AND Billing Account Administrator or Billing Account User for the target Cloud Billing account

Reference link- https://cloud.google.com/billing/docs/how-to/modify-

Reveal Solution Next Question

QUESTION: 154 Exam Topic: 2, Exam Pool B

You are working with a user to set up an application in a new VPC behind a firewall and it is no-ticed that the user is concerned about data egress. Therefore, to provide assistance you want to con-figure the fewest open egress ports.
Which of the following statement is correct?

Set up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
Set up a high-priority (1000) rule to allow the appropriate ports.
Set up a high-priority (1000) rule that pairs both ingress and egress ports.

Answer(s): B

Explanation:

Implied rules Every VPC network has two implied firewall rules. These rules exist, but are not shown in the Cloud Console:
Implied allow egress rule. An egress rule whose action is allow, destination is 0.0.0.0/0, and priority is the lowest possible (65535) lets any instance send traffic to any destination, except for traffic blocked by Google Cloud. A higher priority firewall rule may restrict outbound access. Internet access is allowed if no other firewall rules deny outbound traffic and if the instance has an external IP address or uses a Cloud NAT instance. For more information, see Internet access requirements.

Reference link- https://cloud.google.com/vpc/docs/firewalls

Reveal Solution Next Question