A storage private endpoint exists, but clients resolve the normal storage hostname to a public address. What should the administrator investigate?

1. Only the storage account's cost tags
2. The number of App Service deployment slots
3. The VM's operating system license
4. Private DNS zone records and virtual-network DNS integration