Ans.
Secure the storage account by using Role-Based Access Control (RBAC) and Azure Active Directory
Secure data in transit between an application and Azure by using client-side encryption, HTTPS, or SMB 3.0
Set data to be automatically encrypted when it’s written to Azure Storage by using Storage Service Encryption
Set OS and data disks used by virtual machines (VMs) to be encrypted by using Azure Disk Encryption
Grant delegated access to the data objects in Azure Storage by using shared access signatures (SASs)