An administrator named Jordan is configuring Azure Backup for an SMB file share named `sharesmbcorp` hosted in a Premium storage account named `storprdpremium` in the North Europe region. The storage account's network security is configured to allow access only from selected networks. Jordan currently has the following RBAC assignments:
- `Backup Operator` role on the Recovery Services Vault named `rsv-prd-europe`
- `Reader` role on the resource group containing `storprdpremium`
Jordan attempts to configure the backup of `sharesmbcorp` to `rsv-prd-europe` but the configuration fails.
Which two actions should you perform to allow Jordan to configure the backup? (Select two.)
- Enable the 'Allow Azure services on the trusted services list to access this storage account' setting in the network settings of `storprdpremium`.Cevap
- Assign Jordan the Contributor role on `storprdpremium`.Cevap
- CAssign Jordan the Storage File Data Privileged Contributor role on `storprdpremium`.
- DAdd the public IP address of the Recovery Services Vault to the firewall allowed list of `storprdpremium`.
Cevap
Enable the 'Allow Azure services on the trusted services list to access this storage account' setting in the network settings of the storage account, and assign the administrator the Contributor role on the storage account.
To successfully configure the backup of an Azure File share in a secured storage account, two requirements must be met: First, the storage firewall must allow the backup service, which is achieved by enabling the 'Allow Azure services on the trusted services list' option. Second, the administrator must have control-plane write permissions (Contributor role) on the storage account to register the storage account with the vault.
Adım Adım Çözüm
Anahtar Kavram
To backup a firewalled Azure File share, you must allow trusted Microsoft services to bypass the storage account firewall, and the administrator configuring the backup must have the Contributor role on the storage account.
Tahmini Süre:2m 0s