nerdexam
Microsoft

AZ-500 · Question #134

SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in…

The correct approach configures Azure Storage Account network firewall rules to restrict access to only the specified IP range (131.107.0.0/16) by navigating to 'Firewalls and virtual networks', selecting 'Selected networks', and adding the IP address range 131.107.0.0/16 under…

Submitted by ravi_2018· Mar 6, 2026Implement and manage storage accounts security - specifically configuring Azure Storage firewalls and virtual network rules to restrict access based on IP address ranges (AZ-104: Implement and Manage Storage / Configure Azure Storage firewalls and virtual networks)

Question

SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: [email protected] Azure Password: Ag1Bh9!#Bd The following information is for technical support purposes only: Lab Instance: 10598168 You need to ensure that only devices connected to a 131.107.0.0/16 subnet can access data in the rg1lod10598168 Azure Storage account. To complete this task, sign in to the Azure portal. Answer: Step 1: 1. In Azure portal go to the storage account you want to secure. Here: rg1lod10598168 2. Click on the settings menu called Firewalls and virtual networks. 3. To deny access by default, choose to allow access from Selected networks. To allow traffic from all networks, choose to allow access from All networks. 4. Click Save to apply your changes. Step 2: 1. Go to the storage account you want to secure. Here: rg1lod10598168 2. Click on the settings menu called Firewalls and virtual networks. 3. Check that you've selected to allow access from Selected networks. 4. To grant access to a virtual network with a new network rule, under Virtual networks, click Add existing virtual network, select Virtual networks and Subnets options. Enter the 131.107.0.0/16 subnet and then click Add. Note: When network rules are configured, only applications requesting data over the specified set of networks can access a storage account. You can limit access to your storage account to requests originating from specified IP addresses, IP ranges or from a list of subnets in an Azure Virtual Network (VNet). Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Exhibits

AZ-500 question #134 exhibit 1
AZ-500 question #134 exhibit 2
AZ-500 question #134 exhibit 3
AZ-500 question #134 exhibit 4
AZ-500 question #134 exhibit 5
AZ-500 question #134 exhibit 6

Explanation

The correct approach configures Azure Storage Account network firewall rules to restrict access to only the specified IP range (131.107.0.0/16) by navigating to 'Firewalls and virtual networks', selecting 'Selected networks', and adding the IP address range 131.107.0.0/16 under the Firewall section. This ensures that only traffic originating from devices within that subnet is permitted, while all other public internet traffic is denied by default. Azure Storage firewall rules work at the network layer and evaluate the source IP of incoming requests against the allowed IP ranges configured.

Topics

#Azure Storage Account#Network Security#Firewall Rules#Access Control

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice