Examkin

Question

Difficulty: MediumConfigure Azure Files and Azure File Sync

You are configuring Azure File Sync to synchronize an on-premises folder named E:\Data on a Windows Server named Server1 with an Azure file share named share1. The storage account hosting share1 has its firewall configured to restrict access to selected virtual networks and IP addresses. Server1 accesses the internet through a public IP address that is not allowed in the storage account firewall settings. You need to ensure that Server1 can synchronize files with share1 and that cloud tiering is enabled to maintain at least 30% free space on volume E. Which two configurations are required to achieve this goal? (Select two.)

  1. Add the public IP address of Server1 to the firewall settings of the storage account.Answer
  2. Create a sync group in the Storage Sync Service containing a cloud endpoint for share1 and a server endpoint for E:\Data with cloud tiering enabled and volume free space set to 30%.Answer
  3. C
    Enable the 'Allow trusted Microsoft services to access this storage account' setting on the storage account firewall.
  4. D
    Assign the Storage File Data SMB Share Reader role to the Microsoft Entra ID registered identity of Server1.

Answer

To configure sync and satisfy the network and space requirements, you must add the public IP address of Server1 to the storage account firewall settings, and create a sync group containing a cloud endpoint for share1 and a server endpoint for E:\Data with cloud tiering enabled and volume free space set to 30%.
Synchronizing files requires that the on-premises server has direct network connectivity to the storage account endpoints. Since a firewall is active, adding the server's public IP address to the allowed list permits the agent to communicate. Additionally, configuring the sync group with a cloud endpoint and server endpoint establishes the replication relationship, and setting the cloud tiering volume free space policy to 30% ensures that the server actively tiers files to maintain the required free space on volume E.

Step-by-Step Solution

1
Configure storage account networking
The public IP address of Server1 is added to the allowed IP ranges under the storage account's Networking settings.
This allows the Azure File Sync agent on Server1 to directly establish HTTPS connections to the Azure File Share endpoints, bypassing the default block rule.
2
Define the sync topology
A sync group is created with a cloud endpoint mapping to share1.
A sync group defines the synchronization topology for a set of files.
3
Add and configure the server endpoint
The path E:\Data is added as a server endpoint inside the sync group, with cloud tiering set to 30% volume free space.
This establishes the local folder as a endpoint for sync and tells the agent to tier cold files to the cloud when free space on volume E falls below 30%.

Key Concept

Azure File Sync configuration, including storage account firewall bypass limitations, sync groups, endpoints, and cloud tiering volume free space policies.
Rate this question

Topics

Configure Azure Files and Azure File Sync

More questions from this topic