You have a Standard storage account named `sa-ops-prod` in the East US region. The storage account hosts an SMB file share named `ops-share` and has its firewall configured to restrict access to selected networks. You plan to configure Azure Backup for `ops-share` using a Recovery Services vault. Which two configurations are required to ensure the backup completes successfully? (Choose two.)
- Configure the storage account to allow trusted Microsoft services to bypass the firewallCevap
- Deploy a Recovery Services vault in the East US region to store the backupsCevap
- CAssign the Storage File Data Privileged Reader role to the Recovery Services vault's system-assigned managed identity
- DAdd the public IP address range of the Recovery Services vault to the allowed IP ranges on the storage account firewall
Cevap
Deploying a Recovery Services vault in the East US region and configuring the storage account to allow trusted Microsoft services to bypass the firewall are both required.
To successfully back up an Azure file share using Azure Backup, the Recovery Services vault must be deployed in the same region as the storage account hosting the share. Additionally, if the storage account firewall is enabled, the option to allow trusted Microsoft services to bypass the firewall must be configured to allow the backup service access.
Adım Adım Çözüm
Anahtar Kavram
Azure Files backup requires region alignment between the vault and the storage account, and allowing trusted Microsoft services through the storage firewall if configured.