Examkin

Question

Difficulty: EasyConfigure Azure Files and Azure File Sync

An administrator is setting up Azure File Sync. The administrator configures a storage account to restrict network access using a firewall. To allow the Azure File Sync service to access the Azure file share inside this secured storage account, which setting should the administrator enable on the storage account's firewalls and virtual networks configuration?

  1. Allow trusted Microsoft services to access this storage accountAnswer
  2. B
    Configure a Shared Access Signature (SAS) token with no expiration date for authentication
  3. C
    Assign the Storage Blob Data Owner RBAC role to the Storage Sync Service
  4. D
    Configure the server endpoint to use a static public IP address that is explicitly allowed by the firewall

Answer

Allow trusted Microsoft services to access this storage account
Allowing trusted Microsoft services to access the storage account is the correct configuration. Azure File Sync is a trusted Microsoft service, and enabling this setting allows the service to bypass storage account firewalls to access the Azure file share.

Step-by-Step Solution

1
Identify the requirement to allow Azure File Sync to communicate with an Azure file share located inside a storage account that has a firewall enabled.
Recognize that network access is blocked by default when the storage account firewall is configured to restrict traffic.
By default, enabling the storage firewall blocks all external services unless an exception is made.
2
Determine the correct bypass mechanism for Azure File Sync.
Identify that Azure File Sync is classified as a trusted Microsoft service.
Microsoft provides a built-in exception to allow trusted services to securely access the storage account over the Azure backbone.
3
Select the option to allow trusted Microsoft services within the firewalls and virtual networks settings of the storage account.
Azure File Sync successfully connects to the Azure file share to establish the cloud endpoint.
This setting enables the required secure communication channel between Azure File Sync and the storage account.

Key Concept

Configuring storage account firewall exceptions for Azure File Sync
Rate this question

Topics

Configure Azure Files and Azure File Sync

More questions from this topic