As an architect for a cloud solution, you need to make sure that a sensitive database on Azure used by your internal applications is not accessible over the internet but remains reachable from your virtual network. What should you do to achieve this secure networking requirement?
Implement a private endpoint connecting to the service
Establish an Azure VPN Gateway to the service
Provision a public endpoint for the service with access controls
Assign a public IP address to the service to enable secure connections