Microsoft Azure Administrator Associate AZ-104 Practice Question

Configuring firewall settings on the storage account allows you to specify which sources are permitted to connect. By adding the approved internet addresses to the firewall rules, you effectively restrict access to those addresses. Enabling Azure Storage encryption secures data at rest but doesn't control who can access the storage account over the network. Implementing Azure AD authentication manages user identities and access permissions but doesn't restrict network-level access based on connection origin. Using shared access signatures (SAS) provides delegated access to storage resources but doesn't restrict network access based on source addresses.