Skip to Content

Microsoft AZ-104: How to Limit Access to an Azure Storage Account from Specific Networks?

By: Author Alex Lim

Posted on

Categories Exam

Learn the first step in restricting access to an Azure storage account from selected networks and your home office while minimizing administrative effort.

Table of Contents

Question

You have an Azure subscription that contains a storage account named storage1.

You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort.

What should you do first for storage1?

A. Add a private endpoint.
B. Modify the Public network access settings.
C. Select Internet routing.
D. Modify the Access Control (IAM) settings.

Answer

B. Modify the Public network access settings.

Explanation

To allow access to the Azure storage account named storage1 from selected networks and your home office with minimal administrative effort, the first step should be modifying the Public network access settings for the storage account.

By default, Azure storage accounts accept connections from clients on any network. To limit access to selected networks, you need to change the default action in the Public network access settings:

  1. Navigate to the storage account in the Azure portal.
  2. Go to the “Networking” section under “Security + networking”.
  3. In the “Firewalls and virtual networks” tab, under “Allow access from”, select “Selected networks”.
  4. Configure the specific IP addresses, IP ranges, or virtual networks that should have access to the storage account.
  5. Save the changes.

After modifying the Public network access settings, only requests from the specified networks and IP addresses will be allowed to access the storage account. This approach minimizes administrative effort compared to other options like adding a private endpoint or modifying IAM settings.

Remember to add the IP address or range for your home office to ensure access from there as well.

Microsoft AZ-104 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft AZ-104 exam and earn Microsoft AZ-104 certification.