What is the main function of configuring virtual network service endpoints for your Azure storage accounts?

Question $5$Select one:

Limit access to specific IP addresses or an IP address range

Allow you to remove access from the public Internet and only allow traffic from a virtual network for improved security

Allows you to grant client access to a specific resource, for a specified period of time, and with a specified set of permissions, rather than providing access to the entire contents of the storage account

Enables no public read access for anonymous users, and only users with rights granted through RBAC or with the storage account name and key will have access to the stored documents