AZ-104 Practice Question 83: Storage Firewall Trusted Services
Microsoft Azure Administrator Associate (AZ-104) · Test 9 · question 3 of 10
A storage account has its firewall set to Selected networks, and Azure Backup is used to protect a file share in it. Since the firewall was enabled, backup jobs fail with an authorization error. The administrator must restore the jobs without opening the account to all networks.
What should the administrator do?
Show answer and explanation
Answer:
Some Azure services, Azure Backup among them, access storage accounts from the Azure backbone and cannot be listed as a network or IP address. The setting that allows trusted Azure services makes an exception for them, while the account stays closed to other networks.
Option B is not workable because the service does not run from a published fixed address that can be relied on, and the addresses change.
Option C weakens transport security and does not address the network authorization failure.
Option D is wrong because a Recovery Services vault does not live in a subnet of a virtual network.
Reference: Troubleshoot Azure Files backup