Microsoft Azure Administrator Associate AZ-104 Practice Question

To achieve this, you should set the storage account's firewall settings to permit access from the required external sources. This involves configuring the firewall to allow traffic only from the specific public IP addresses associated with your on-premises locations. This approach effectively blocks all other network traffic over the Internet. Integrating the storage account with a virtual network in Azure won't help because on-premises networks aren't part of Azure's virtual networks. Enabling private endpoints restricts access to within Azure virtual networks or through private connections, not over the Internet from specific external locations. Activating Azure Active Directory authentication manages identity-based access but doesn't control network-level access based on source addresses.