nerdexam
Microsoft

AZ-104 · Question #235

You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on- premises…

The correct answer is A. From the Firewalls and virtual networks blade of account1, select Selected networks. C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address. Azure Storage offers a multi-layered security model. Thanks to this model, you can protect your storage accounts for a specific group of supported networks. If network rules have been configured, only applications that request data from the specified group of networks can…

Submitted by carlos_mx· Mar 4, 2026Implement and manage storage

Question

You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on- premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: - Ensure that you can upload the disk files to account1. - Ensure that you can attach the disks to VM1. - Prevent all other access to account1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • AFrom the Firewalls and virtual networks blade of account1, select Selected networks.
  • BFrom the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services
  • CFrom the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address
  • DFrom the Firewalls and virtual networks blade of account1, add VNet1.
  • EFrom the Service endpoints blade of VNet1, add a service endpoint.

How the community answered

(31 responses)
  • A
    68% (21)
  • B
    3% (1)
  • D
    19% (6)
  • E
    10% (3)

Explanation

Azure Storage offers a multi-layered security model. Thanks to this model, you can protect your storage accounts for a specific group of supported networks. If network rules have been configured, only applications that request data from the specified group of networks can access a storage account. Standard network access rules for storage accounts can be managed through the Azure portal, PowerShell or CLI v2. https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice