Examkin

Question

Difficulty: MediumConfigure Azure Files and Azure File Sync

You are planning the deployment of Azure File Sync. You have an on-premises Windows Server 2022 named FS01 and an Azure Storage account named storage1. The storage1 account contains an Azure file share named share1.

For security reasons, the firewall on storage1 is enabled and configured to allow access only from selected virtual networks and IP addresses.

You need to configure the environment to allow FS01 to synchronize files with share1.

Which of the following actions can you perform to allow FS01 to connect to storage1? (Select two.)

  1. Create a private endpoint for the File service of storage1.Answer
  2. Add the public IP address of FS01 to the firewall settings of storage1.Answer
  3. C
    Enable the 'Allow trusted Microsoft services to access this storage account' setting on storage1.
  4. D
    Map the local synchronization path on FS01 to a second server endpoint in another sync group.

Answer

Create a private endpoint for the File service of storage1, and add the public IP address of FS01 to the firewall settings of storage1.
To establish connection from an on-premises server to a firewalled storage account, you can either create a private endpoint for the File service of storage1 (which routes traffic over a private connection like VPN/ExpressRoute) or add the public IP address of FS01 to the firewall allowed list (which allows public traffic from the server).

Step-by-Step Solution

1
Identify the networking requirements for Azure File Sync when a storage account firewall is enabled.
Determine that Azure File Sync requires a direct connection to the storage account's endpoint, which is blocked by the default firewall rule.
To find valid connectivity options for the on-premises server.
2
Evaluate the options for bypassing or routing through the storage account firewall.
You can configure a private endpoint for the File service of storage1 to route traffic over a private network, or add the public IP address of FS01 to the firewall settings to allow traffic over the public internet.
To establish network connectivity between the registered server and the Azure file share.
3
Assess and eliminate invalid bypass or endpoint configuration options.
Reject the trusted Microsoft services option since Azure File Sync is not included, and reject the multiple sync group mapping option because server endpoint paths cannot overlap.
To eliminate incorrect configurations that do not restore connectivity or are unsupported.

Key Concept

Configuring network access and firewalls for Azure Files and Azure File Sync.
Rate this question

Topics

Configure Azure Files and Azure File Sync

More questions from this topic