You have an Azure subscription that contains a Recovery Services vault named `rsv-backup-prod` and a Premium storage account named `safilesprod` in the West US region. The storage account hosts an SMB file share named `share-hr`. Daily backups for `share-hr` are configured in `rsv-backup-prod`.
The firewall for `safilesprod` is configured to allow access only from selected networks. An administrator named Liam is assigned the Backup Operator role for `rsv-backup-prod` and the Reader role for `safilesprod`.
Liam attempts to restore a set of deleted files from a daily backup to the original location, but the restore operation fails with a network access error.
What should you configure to resolve the issue?
- Configure the firewall of `safilesprod` to allow trusted Microsoft services to access the storage account.Cevap
- BAssign Liam the Storage File Data Privileged Contributor role on `safilesprod`.
- CAdd the public IP address of the client computer Liam is using to the firewall rules of `safilesprod`.
- DConfigure the private endpoint of `safilesprod` to allow inbound traffic from the subnet hosting the Recovery Services vault.
Cevap
Configure the firewall of the storage account to allow trusted Microsoft services to access the storage account.
The correct option is to configure the firewall of the storage account to allow trusted Microsoft services to access the storage account. When a storage account firewall is configured to restrict access to selected networks, the Azure Backup service (which runs as a trusted Microsoft service) requires this exception to bypass the firewall and perform backup or restore operations on the Azure file share.
Adım Adım Çözüm
Anahtar Kavram
Azure Files Backup Firewall Bypass
Tahmini Süre:1m 30s