QuestionQ61

Design security solutions for applications and data

Your company has 10 branch offices. Each office has a local internet connection that uses a static IP address.

You have an Azure subscription. The subscription contains a storage account named storage1 that stores blobs.

Users in the branch offices access the blobs through the internet.

You need to recommend a solution that ensures data in storage1 is accessible only from the branch-office static IP addresses. The solution must minimize costs.

What should the recommendation include?

  • A Azure Private Link
  • B an Azure Firewall policy
  • C Azure Storage firewall rules
  • D a network security group (NSG)
Explanation

Azure Storage firewall rules support IP network rules for specific public IP address ranges. Configuring rules for the 10 branch-office static public IP addresses and denying other network access limits the storage account’s public endpoint to those offices at the lowest cost among the options.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!