Challenge: from public endpoint to private-only

تحدي: من Public endpoint لـ Private بس

Requirements only — decide the blades and commands yourself. Use the hint if stuck; reveal the solution only after a real attempt. Account contosonetlock is open to all networks. Restrict it step by step to the app subnet and the office, then move to a private endpoint and close the public endpoint completely — without breaking Azure Backup/Monitor access.

The 4 tasks you will do

• Requirement 1 — Only the app subnetالمطلب 1 — الـ App subnet بس
• Requirement 2 — Office range and trusted servicesالمطلب 2 — رينج المكتب والـ Trusted services
• Requirement 3 — Private endpoint for blobsالمطلب 3 — Private endpoint للـ Blobs
• Requirement 4 — Private-onlyالمطلب 4 — Private بس

The lesson it belongs to

• Storage firewalls, service endpoints and private endpoints