AZ-104 Question 78
Single answerYour company recently created a new Azure Storage account to store sensitive data. The security policy states that only requests from a specified set of public IP addresses should be allowed to access the account. Which configuration setting in the Azure Storage account must be modified to enforce this requirement?
- A
Enable hierarchical namespace
- B
Configure encryption with customer-managed keys
- C
Configure network access using firewall and virtual networks
- D
Update storage replication to Geo-Redundant Storage (GRS)
Show answer and explanation
Correct answer: C
Explanation
To restrict access to specific IP addresses, you must configure the storage account’s firewall and virtual network settings. This allows you to define allowed public IP ranges, ensuring only approved traffic can reach the storage account.
- A. Incorrect.
Hierarchical namespace is used primarily when enabling Data Lake Storage Gen2 features, not for restricting network connections.
- B. Incorrect.
Configuring encryption with customer-managed keys helps secure data at rest, but it does not control access based on IP addresses.
- C. Correct.
Configuring network access with firewall and virtual networks allows you to explicitly permit or deny connections based on IP addresses, which satisfies the requirement.
- D. Incorrect.
Updating storage replication to GRS or other redundancy options affects data redundancy and availability, not access control based on IP addresses.