An administrator needs to restrict access to an Azure Storage account named stdatafiles2026 so that it is only accessible from a specific subnet named Subnet1 in a virtual network named VNet1. The configuration must use service endpoints.
Arrange the steps in the correct order to configure the network access.
- 1Navigate to the configuration settings of Subnet1 within virtual network VNet1.
- 2Enable the Microsoft.Storage service endpoint on Subnet1 and save the changes.
- 3Navigate to the Security + networking section, select Networking, and open the Firewalls and virtual networks tab of the storage account stdatafiles2026.
- 4Set the public network access configuration to 'Enabled from selected virtual networks and IP addresses'.
- 5Add VNet1 and Subnet1 to the virtual networks list under the firewall settings, and save the storage account configuration.
Cevap
To configure storage network access using service endpoints, first navigate to Subnet1 inside VNet1 and enable the Microsoft.Storage service endpoint. Then, access the stdatafiles2026 storage account networking settings, restrict access to selected virtual networks, and add Subnet1 to the allowed virtual networks list.
The correct sequence starts by enabling the Microsoft.Storage service endpoint on Subnet1 inside VNet1. This ensures that any traffic from Subnet1 to Azure Storage is routed through the Microsoft backbone with a private/subnet identifier. Next, you navigate to the networking configuration of the storage account stdatafiles2026, set the firewall to allow access only from selected networks, and add VNet1/Subnet1 to the authorized list. This binds the subnet to the storage account's network rules.
Adım Adım Çözüm
Anahtar Kavram
Configuring Azure Storage network security using Virtual Network Service Endpoints involves enabling the endpoint on the subnet first, then restricting the storage account to selected networks, and finally authorizing the subnet in the storage account firewall.