A web app currently accesses Azure Blob Storage by using the storage account key in a connection string. Security now requires blocking any new requests that use shared key authorization, while Microsoft Entra-based access must continue to work. Which storage account setting should the administrator change?

Set the storage account network access to selected networks only.

Network restrictions limit where traffic can come from, but they do not block authentication by shared key. The problem is about authorization method, not source IP.

Rotate the account keys and leave all authentication methods enabled.

Key rotation changes the secret value, but it does not prevent applications from continuing to use shared key authorization. The requirement is to block that access pattern entirely.

Enable object replication for the storage account.

Object replication addresses data movement between storage accounts. It does not control whether clients may authenticate with shared keys or Microsoft Entra identities.

What does this AZ-104 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Disable shared key authorization on the storage account. — If the security team wants to stop new requests that rely on storage account keys while keeping Microsoft Entra access available, the correct control is to disable shared key authorization. This changes the authentication behavior at the storage account level rather than just rotating secrets or limiting network paths. It directly targets the insecure access method without removing identity-based access. Why others are wrong: Network restrictions only filter traffic sources, not authentication methods. Key rotation is a secret management step, but it does not prevent continued use of the key-based model. Object replication is unrelated to client authentication and would not satisfy the security requirement.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.