Your company has deployed a multi-tier application in Azure, where the frontend is publicly accessible while the backend databases should be secured and not accessible from the Internet. Which type of endpoint should be configured for the backend databases to ensure they are only reachable from within the Azure Virtual Network?
On-premises data gateway
Private endpoints
Service endpoints
Public endpoints