Microsoft Azure Administrator Associate AZ-104 Practice Question

To restrict access to a storage account to a specific network, you should configure the storage account's firewall settings to allow traffic from that network. This involves specifying the internal network's address ranges in the storage account's network settings. Enabling Azure Active Directory (Azure AD) authentication changes the authentication method but does not restrict network access based on network location. Generating a Shared Access Signature (SAS) provides tokens with specific permissions but doesn't limit access by network. Allowing access from any network does not impose any restrictions and therefore does not meet the requirement.