az-104 Practice Question 1708
Exam: az-104
Domain: Implement and manage storage
Topic: Configure access to storage
Difficulty: medium
Contoso Ltd has a hybrid environment where some applications run in Azure and others on-premises. They need to ensure that Azure Blob Storage is accessible only from their on-premises network. What configuration should they use, and how does it work?
Answer Options
A
Use Shared Access Signatures (SAS) with a specific IP range.
B
Set up a Virtual Network (VNet) to isolate the storage account.
C
Configure Storage Firewall to allow only specific IP ranges.
D
Deploy a firewall in front of the storage account to block unauthorized IPs.
Correct Answer
C: Configure Storage Firewall to allow only specific IP ranges.
Explanation
The correct answer is to use Storage Firewall. Storage Firewall allows you to define rules based on IP addresses or ranges, ensuring that only traffic from the on-premises network can access the storage account. Other options like Shared Access Signatures (SAS) and Stored Access Policies do not control IP access directly. Shared Access Signatures provide temporary access with specific permissions, and Stored Access Policies apply to all blobs and containers within a storage account, not just specific IP ranges.