QuestionQ5

Design security solutions for applications and data

Your company intends to provision blob storage by using an Azure Storage account. The blob storage will be available to 20 application servers on the internet.

You need to recommend a solution that ensures only the application servers can access the storage account.

What should you recommend to secure the blob storage?

  • A managed rule sets in Azure Web Application Firewall (WAF) policies
  • B inbound rules in network security groups (NSGs)
  • C firewall rules for the storage account
  • D inbound rules in Azure Firewall
  • E service tags in network security groups (NSGs)
Explanation

Azure Storage account firewall rules restrict access to the storage account’s public endpoint by allowed source IP addresses or IP ranges. Configuring rules for the public IP addresses of the 20 application servers permits their access and denies other internet sources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!