Examkin

Question

Difficulty: EasyConfigure Storage Account Network Access

An administrator restricts network access to an Azure Storage account named `sareports` by enabling access only from selected virtual networks. Following this change, Azure Backup jobs for the storage account's file shares fail with network connection errors. Which setting must the administrator configure on the storage account firewall to allow the backup operations to succeed?

  1. Enable the exception that allows trusted Microsoft services to access the storage account.Answer
  2. B
    Assign the Storage Blob Data Contributor role to the Azure Backup service instance.
  3. C
    Add the public IP addresses of the regional Azure Backup service to the storage firewall allowed ranges.
  4. D
    Disable public network access entirely and configure a private endpoint for the Azure Backup service.

Answer

Enable the exception that allows trusted Microsoft services to access the storage account.
The correct setting is to enable the exception that allows trusted Microsoft services to access the storage account. When a storage account firewall is configured to restrict access to selected virtual networks, it blocks traffic from outside those networks, including other Azure services. The 'Allow trusted Microsoft services' checkbox acts as a secure bypass, enabling services like Azure Backup to interact with the storage account.

Step-by-Step Solution

1
Analyze the cause of the backup failure.
The failure occurs because restricting the storage account network access blocks all external traffic, including internal Azure services.
Firewalls block all communication by default when set to allow access only from selected virtual networks.
2
Apply the correct firewall bypass settings.
Enabling the 'Allow trusted Microsoft services' setting allows Azure Backup to reach the storage account.
This built-in exception allows Microsoft services to securely bypass network restrictions for administrative and operational tasks.

Key Concept

Azure Storage Firewall Exceptions
Estimated Time:45s
Rate this question

Topics

Configure Storage Account Network Access

More questions from this topic