Your network contains an on$-$premises Active Directory domain named contoso.com. Contoso.com contains a user named User$1$ and syncs to Microsoft Entra.

You create an Azure Storage account named storage$1$ and a file share named share$1.$

You need to assign User$1$ the Storage File Data SMB Share Reader role on share$1.$

What should you do first?

Select only one answer.

Add a read$-$only lock to storage$1.$

Enable advanced security for storage$1.$

Generate a shared access signature $($SAS$).$

Join storage$1$ to contoso.com.