An administrator needs to restrict access to an Azure Storage account named storage1 so that it only accepts traffic originating from a specific subnet in a virtual network. What is the correct sequence of steps to configure this network restriction in the Azure portal?
- 1Navigate to the storage1 storage account in the Azure portal.
- 2In the left navigation menu, under the Security + networking section, select Networking.
- 3On the Firewalls and virtual networks tab, change Public network access to 'Enabled from selected virtual networks and IP addresses'.
- 4Under the Virtual networks section, select 'Add existing virtual network', and then select the target virtual network and subnet.
- 5Select Save to apply the configuration changes.
Answer
The correct sequence of steps is to first navigate to the storage1 storage account, go to the Networking settings under Security + networking, set the Public network access to 'Enabled from selected virtual networks and IP addresses', add the target virtual network and subnet, and then select Save to apply the changes.
To restrict access to a storage account from a specific subnet, the administrator must navigate to the storage account, access the Networking settings, change Public network access to 'Enabled from selected virtual networks and IP addresses', add the target subnet under Virtual networks, and save the settings.
Step-by-Step Solution
Key Concept
Azure Storage Firewall Configuration
Estimated Time:1m 0s