AZ-104 Certification Practice Question #256

Question

You have an Azure subscription that contains a storage account named storage1.

You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort.

What should you do first for storage1?

Accepted Answer

To restrict access to a storage account to selected networks and a home office while minimizing administrative overhead, you should modify the storage account's network security settings. By changing the public network access setting to "Enabled from selected virtual networks and IP addresses," you can easily whitelist specific virtual network subnets and the home office's public IP address directly on the storage firewall. Private endpoints (A) are more complex and require private DNS zone setup, and IAM settings (D) govern user permissions rather than network-level firewalls.

More AZ-104 practice questions