Configuring Access to Azure Blob Storage

What you'll be asked

1. Which authentication method is considered the most secure for accessing Azure Blob Storage by following the principle of least privilege?
2. You need to provide a third-party application temporary access to a specific blob for 2 hours. Which mechanism should you use?
3. An organization wants to ensure that blob storage traffic remains on the Azure private network, avoiding exposure to the public internet. What should they implement?
4. Which setting must be configured to ensure that all data written to an Azure Storage account is encrypted at rest using customer-managed keys?
5. A developer is implementing a storage solution where they must ensure that even if a user has 'Storage Blob Data Contributor' rights, they cannot modify or delete a blob for a period of 30 days. How can this be achieved?

Answers and explanations come after you submit.