AZ-303 Exam QuestionsBrowse all questions from this exam

AZ-303 Exam - Question 196


SIMULATION -

Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

Exam AZ-303 Question 196Exam AZ-303 Question 196Exam AZ-303 Question 196Exam AZ-303 Question 196Exam AZ-303 Question 196Exam AZ-303 Question 196

When you are finished performing all the tasks, click the `˜Next' button.

Note that you cannot return to the lab once you click the `˜Next' button. Scoring occur in the background while you complete the rest of the exam.

Overview -

The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

To start the lab -

You may start the lab by clicking the Next button.

Your on-premises network uses an IP address range of 131.107.2.0 to 131.107.2.255.

You need to ensure that only devices from the on-premises network can connect to the rg1lod8322490n1 storage account.

What should you do from the Azure portal?

Show Answer
Correct Answer:

To ensure that only devices from the on-premises network can connect to the rg1lod8322490n1 storage account, you need to configure the network settings for the storage account. Follow these steps in the Azure portal: Step 1: Navigate to the rg1lod8322490n1 storage account. Step 2: Click on the 'Networking' blade in the storage account settings menu. Step 3: Ensure that you have selected 'Selected networks' to limit access. Step 4: Under 'Firewall and virtual networks', enter the address range 131.107.2.0 to 131.107.2.255 in CIDR notation (131.107.2.0/24) under 'Address Ranges'. Step 5: Toggle off any option such as 'Allow Azure services on the trusted services list to access this storage account' to restrict access only to the specified IP range.

Discussion

4 comments
Sign in to comment
debleenac85
Jan 8, 2021

CIDR 131.107.2.0/24 in Networking --> Selected Networks

bjoernhoefer
Jan 5, 2021

The Firewall-Settings are now in the "Networking" blade of the storage-account

UnknownSecret
Jul 19, 2021

PLease remember to uncheck the "Allow Azure services on the trusted services list...." as it is clearly given: .....ensure that ONLY devices.....

Anoop_Aravindhakshan
Jun 15, 2021

IP level restriction is under security+Networking - Shared Access signatures