You need to restrict inbound traffic to a specific set of client IP ranges. Where is this configured?

1. A A Network Security Group on the environment subnet
2. ✓ B IP restrictions in the Container App's ingress configuration (correct answer)
3. C A Kubernetes NetworkPolicy
4. D Azure Firewall only

Shortcut: Container Apps ingress supports allow/deny IP restriction rules evaluated at the ingress layer, which is the supported mechanism for source IP filtering.