Examkin

Question

Difficulty: EasyConfigure Storage Account Network Access

A company has an Azure Storage account that is configured to allow network access only from 'Selected virtual networks and IP addresses'. An administrator needs to ensure that the Azure Backup service can successfully access the storage account to perform backup operations. Which network configuration change should the administrator apply to the storage account?

  1. A
    Assign the Storage Blob Data Owner role to the Azure Backup service principal.
  2. B
    Create a Network Security Group (NSG) rule to allow inbound traffic from the Azure Backup service tag.
  3. Enable the exception that allows trusted Microsoft services to access the storage account.Answer
  4. D
    Enable a service endpoint for Microsoft.Storage on the subnet containing the Azure Backup vault.

Answer

Enable the exception that allows trusted Microsoft services to access the storage account.
Enabling the exception to allow trusted Microsoft services to access the storage account is the correct configuration. When a storage account firewall is enabled, Azure services that are defined as trusted, such as Azure Backup, can bypass the firewall restrictions if this exception is checked.

Step-by-Step Solution

1
Navigate to the Azure Storage account in the Azure Portal.
The storage account management blade is displayed.
To modify storage account network settings, you must navigate to the specific storage account resource.
2
Under the Security + networking section, select Networking.
The Firewalls and virtual networks configuration tab is opened.
This is where public network access limits, virtual network rules, IP firewalls, and resource exceptions are managed.
3
Under Exceptions, check the box for 'Allow Azure services on the trusted services list to access this storage account'.
The firewall bypass rule for trusted Microsoft services is enabled.
This exception allows services like Azure Backup to bypass the firewall and access storage resources securely.

Key Concept

Bypassing Azure Storage firewall rules for trusted Microsoft services to ensure managed platform services can access the storage data.
Estimated Time:45s
Rate this question

Topics

Configure Storage Account Network Access

More questions from this topic