In this task, you will create and configure a storage account. The storage account will use geo-redundant storage and will not have public access.

1. Sign in to the Azure portal.
2. Search for and select Storage accounts, and then click + Create.
3. On the Basics tab of the Create a storage account blade, specify the following settings (leave others with their default values):

   Setting	Value
   Subscription	the name of your Azure subscription
   Resource group	<yourName>-mst400-F67-rg (create new)
   Storage account name	<yourname>mst400F67sa (all lowercase)
   Region	(US) East US
   Performance	Standard
   Redundancy	Geo-redundant storage (notice the other options)
   Make read access to data available in the event of regional unavailability	Check the box

   Did you know? You should use the Standard performance tier for most applications. Use the Premium performance tier for enterprise or high-performance applications.
4. On the Advanced tab, use the informational icons to learn more about the choices. Take the defaults.
5. On the Networking tab, review the available options, select Disable public access and use private access.
6. Review the Data protection tab. Notice 7 days is the default soft delete retention policy. Note you can enable blob versioning. Accept the defaults.
7. Review the Encryption tab. Notice the additional security options. Accept the defaults.
8. Select Review, wait for the validation process to complete, and then click Create.
9. Once the storage account is deployed, select Go to resource.
10. Review the Overview blade and the additional configurations that can be changed. These are global settings for the storage account. Notice the storage account can be used for Blob containers, File shares, Queues, and Tables.
11. In the Security + networking section, select Networking. Notice public network access is disabled.
12. Change the public access level to Enabled from selected virtual networks and IP addresses.
13. In the Firewall section, check the box for Add your client IP address.
14. Be sure to Save your changes.
15. In the Data management section, view the Redundancy blade. Notice the information about your primary and secondary data center locations.
16. In the Data management section, select Lifecycle management, and then select Add a rule.
17. Name the rule Movetocool. Notice your options for limiting the scope of the rule.
18. On the Base blobs tab, if based blobs were last modified more than 30 days ago then move to cool storage. Notice your other choices.
19. Notice you can configure other conditions. Select Add when you are done exploring. Screenshot must show your Odl_user account, the storage account with the Movetocool lifecycle management rule (base blobs move to cool storage after 30 days)

In this task, you will create a blob container and upload an image. Blob containers are directory-like structures that store unstructured data.

2a. Create a blob container and a time-based retention policy

1. Continue in the Azure portal, working with your storage account.
2. In the Data storage section, click Containers.
3. Click + Container and Create a container with the following settings:

   Setting	Value
   Name	data
   Public access level	Notice the access level is set to private

4. On your container, scroll to the ellipsis (...) on the far right, select Access Policy.
5. In the Immutable blob storage area, select Add policy.

   Setting	Value
   Policy type	Time-based retention
   Set retention period for	180 days

6. Select Save.

2b. Manage blob uploads

1. Return to the containers page, select your data container and then click Upload.
2. On the Upload blob blade, expand the Advanced section. Locate a file to upload — this can be any type of file, but a small file is best.

   Setting	Value
   Browse for files	add the file you have selected to upload
   Blob type	Block blob
   Block size	4 MiB
   Access tier	Hot (notice the other options)
   Upload to folder	securitytest
   Encryption scope	Use existing default container scope

3. Click Upload.
4. Confirm you have a new folder, and your file was uploaded.
5. Select your upload file and review the options including Download, Delete, Change tier, and Acquire lease.
6. Copy the file URL and paste into a new InPrivate browsing window.
7. You should be presented with an XML-formatted message stating ResourceNotFound or PublicAccessNotPermitted.
8. Note: This is expected, since the container you created has the public access level set to Private (no anonymous access).

2c. Configure limited access to the blob storage

1. Select your uploaded file and then on the Generate SAS tab. You can also use the ellipsis (...) to the far right. Specify the following settings (leave others with their default values):

   Setting	Value
   Signing key	Key 1
   Permissions	Read (notice your other choices)
   Start date	yesterday's date
   Start time	current time
   Expiry date	tomorrow's date
   Expiry time	current time
   Allowed IP addresses	leave blank

2. Click Generate SAS token and URL.
3. Copy the Blob SAS URL entry to the clipboard.
4. Open another InPrivate browser window and navigate to the Blob SAS URL you copied in the previous step. Screenshot must show your Odl_user account, the blob file opened through the Blob SAS URL in the InPrivate browser window
5. Note: You should be able to view the content of the file.

In this task, you will create and configure Azure File shares. You will use Storage Browser to manage the file share.

3a. Create the file share and upload a file

1. In the Azure portal, navigate back to your storage account, in the Data storage section, click File shares.
2. Click + File share and on the Basics tab give the file share a name, <yourname>share1.
3. Notice the Access tier options. Keep the default Transaction optimized.
4. Move to the Backup tab and ensure Enable backup is not checked. We are disabling backup to simplify the lab configuration.
5. Click Review + create, and then Create. Wait for the file share to deploy.

3b. Explore Storage Browser and upload a file

1. Return to your storage account and select Storage browser. The Azure Storage Browser is a portal tool that lets you quickly view all the storage services under your account.
2. Select File shares and verify your <yourname>share1 directory is present.
3. Select your <yourname>share1 directory and notice you can + Add directory. This lets you create a folder structure.
4. Select Upload. Browse to a file of your choice, and then click Upload.
5. Note: You can view file shares and manage those shares in the Storage Browser. There are currently no restrictions.

3c. Restrict network access to the storage account

1. In the portal, search for and select Virtual networks.
2. Select + Create. Select your resource group. and give the virtual network a name, <yourName>-mst400-F67-vnet1.
3. Take the defaults for other parameters, select Review + create, and then Create.
4. Wait for the virtual network to deploy, and then select Go to resource.
5. In the Settings section, select the Service endpoints blade.
6. Select Add.
7. In the Service drop-down select Microsoft.Storage.
8. In the Subnets drop-down check the Default subnet.
9. Click Add to save your changes.
10. Return to your storage account.
11. In the Security + networking section, select the Networking blade.
12. Select add existing virtual network and select <yourName>-mst400-F67-vnet1 and default subnet, select Add.
13. In the Firewall section, Delete your machine IP address. Allowed traffic should only come from the virtual network.
14. Be sure to Save your changes.
15. Note: The storage account should now only be accessed from the virtual network you just created.
16. Select the Storage browser and Refresh the page. Navigate to your file share or blob content.
17. Note: You should receive a message not authorized to perform this operation. You are not connecting from the virtual network. It may take a couple of minutes for this to take effect. Screenshot must show your Odl_user account, the Storage browser "not authorized to perform this operation" message

Minimum 2-3 sentences each — original thinking, your own words!

1. Describe the main focus of this lab and outline the new skills or concepts you learned during this Azure lab session.
2. What challenges did you encounter during this lab, and how did you overcome them?
3. How do the tasks performed in this lab enhance your understanding of Azure networking?
4. In what ways can you apply the knowledge gained from this lab to real-world scenarios? Please provide specific examples.

Screenshots you attach above and your Task 4 answers appear here. This is exactly what prints/exported as your PDF.

1. All screenshots attached in task order, each with your Odl_user account visible (underlined or highlighted).
2. A brief explanation added for each screenshot.
3. Export the PDF with Print / Save as PDF and upload it to the Blackboard assignment.