Examkin

Question

Difficulty: MediumConfigure Storage Account Network Access

A company implements an Azure Storage account named `stbackupshare` to store business data. The storage account's firewall is configured to allow access only from a subnet named `Subnet-App` within the virtual network `VNet-Core`. Azure Backup is configured to back up the file shares in `stbackupshare`, but the backup jobs fail with a network access error. Which configuration adjustment must be made to allow Azure Backup to successfully back up the files?

  1. Enable the exception that allows trusted Microsoft services to access the storage account in the firewall settings.Answer
  2. B
    Assign the Storage File Data Privileged Reader role to the Azure Backup service principal at the storage account level.
  3. C
    Add the public IP addresses of the Recovery Services Vault to the firewall allowed IP ranges on the storage account.
  4. D
    Configure a Virtual Network service endpoint for Microsoft.Backup on the Subnet-App subnet.

Answer

Enable the exception that allows trusted Microsoft services to access the storage account in the firewall settings.
Enabling the 'Allow trusted Microsoft services to access this storage account' exception allows Azure Backup to bypass the firewall rules and perform backup and restore operations securely.

Step-by-Step Solution

1
Identify the cause of the network access failure.
The storage account firewall is configured to allow traffic only from a specific subnet, blocking external services.
By default, enabling the firewall blocks all external traffic, including Azure multi-tenant services like Azure Backup.
2
Evaluate the supported bypass options for Azure services.
Identify the 'Allow trusted Microsoft services to access this storage account' setting as the solution.
This setting creates a secure exception for specific Microsoft services to access the storage account even when the firewall is enabled.
3
Confirm configuration requirements.
Verify that Azure Backup is on the list of trusted Microsoft services.
Azure Backup is a trusted service and can securely access storage accounts when this exception is configured.

Key Concept

Bypassing Azure Storage firewalls for trusted Microsoft services
Estimated Time:1m 30s
Rate this question

Topics

Configure Storage Account Network Access

More questions from this topic