Answer-first summary for fast verification
Answer: Restrict access to specific networks in account1's Networking settings., Add the on-premises network's IP range to account1's allowed list.
To meet the specified requirements, you need to perform the following actions: First, restrict access to selected networks to control which networks can access the storage account, ensuring that you can limit access to only the necessary networks (Option A). Then, add the IP address range of your on-premises network so you can upload the VM disk files from that network (Option C). This setup will fulfill the requirement to upload disk files to the storage account and ensure that no other access is permitted. The combination of these two actions restricts unauthorized access while allowing the necessary operations to upload and use the disk files.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In an Azure subscription with a storage account 'account1', you need to configure network access to upload VM disk files from an on-premises network with IP space 131.107.1.0/24 and to attach these disks to a new VM 'VM1' within a VNet 'VNet1' (IP space 192.168.0.0/24). What steps should be taken to meet these requirements while restricting all other access?
A
Restrict access to specific networks in account1's Networking settings.
B
Enable access for trusted Microsoft services in account1's Networking settings.
C
Add the on-premises network's IP range to account1's allowed list.
D
Include VNet1 in account1's allowed virtual networks.
E
Set up a service endpoint in VNet1 for secure access to Azure Storage.