Your company plans to implement Azure File Sync to synchronize files between an on-premises server named SRV-Retail01 and an Azure file share named salesdata. The salesdata share is located in a storage account named storaretail2026.
You configure the firewall on storaretail2026 to restrict access, permitting traffic only from selected networks.
Which two of the following settings or configurations must you implement to ensure that Azure File Sync can successfully synchronize files with the salesdata file share? (Select two.)
- Enable the 'Allow trusted Microsoft services to access this storage account' setting on the firewall of storaretail2026.Cevap
- Configure a private endpoint for the file sub-resource on the storaretail2026 storage account.Cevap
- CGenerate a Shared Access Signature (SAS) token with a 365-day expiration and configure the Azure File Sync agent to use it.
- DAssign the Storage Blob Data Contributor role to the SRV-Retail01 registered server object at the storage account scope.
- EMap the local path on SRV-Retail01 to multiple cloud endpoints across different sync groups to bypass network security controls.
Cevap
To sync files behind a restricted storage firewall, you must enable the trusted Microsoft services bypass on the storage account firewall and create a private endpoint for the storage account's file sub-resource.
The correct configurations are enabling the trusted Microsoft services bypass on the storage account firewall and setting up a private endpoint for the storage account's file sub-resource. The Storage Sync Service must have metadata access, which is allowed by the trusted services exception. The agent on the on-premises server requires private access to transfer data, which is provided by the private endpoint.
Adım Adım Çözüm
Anahtar Kavram
Azure File Sync firewall and private endpoint configuration