A Cosmos DB private endpoint has been approved. Clients still resolve the account endpoint publicly and public access is disabled. What should be investigated?

1. The item TTL setting
2. The embedding vector dimensions
3. The container's indexing mode
4. Private DNS configuration and the clients' private network path