Microsoft Azure Administrator Associate AZ-104 Practice Question

This statement is correct. Azure Active Directory (Azure AD) provides identity-based authentication for Azure Storage services. This method allows for the use of Azure role-based access control (RBAC) to grant granular permissions to security principals like users, groups, and applications. Storage account access keys and Shared Access Signature (SAS) tokens are forms of key-based authentication, not identity-based. Anonymous public read access is a setting that bypasses authentication for public blobs and is not an identity-based method.