Examkin

Soru

Zorluk: KolayConfigure Azure Files and Azure File Sync

An administrator is setting up Azure File Sync. The administrator configures a storage account to restrict network access using a firewall. To allow the Azure File Sync service to access the Azure file share inside this secured storage account, which setting should the administrator enable on the storage account's firewalls and virtual networks configuration?

  1. Allow trusted Microsoft services to access this storage accountCevap
  2. B
    Configure a Shared Access Signature (SAS) token with no expiration date for authentication
  3. C
    Assign the Storage Blob Data Owner RBAC role to the Storage Sync Service
  4. D
    Configure the server endpoint to use a static public IP address that is explicitly allowed by the firewall

Cevap

Allow trusted Microsoft services to access this storage account
Allowing trusted Microsoft services to access the storage account is the correct configuration. Azure File Sync is a trusted Microsoft service, and enabling this setting allows the service to bypass storage account firewalls to access the Azure file share.

Adım Adım Çözüm

1
Identify the requirement to allow Azure File Sync to communicate with an Azure file share located inside a storage account that has a firewall enabled.
Recognize that network access is blocked by default when the storage account firewall is configured to restrict traffic.
By default, enabling the storage firewall blocks all external services unless an exception is made.
2
Determine the correct bypass mechanism for Azure File Sync.
Identify that Azure File Sync is classified as a trusted Microsoft service.
Microsoft provides a built-in exception to allow trusted services to securely access the storage account over the Azure backbone.
3
Select the option to allow trusted Microsoft services within the firewalls and virtual networks settings of the storage account.
Azure File Sync successfully connects to the Azure file share to establish the cloud endpoint.
This setting enables the required secure communication channel between Azure File Sync and the storage account.

Anahtar Kavram

Configuring storage account firewall exceptions for Azure File Sync
Bu soruyu puanla

Konular

Configure Azure Files and Azure File Sync

Bu konudan daha fazla soru