SAP backup traffic must reach a supported storage service through a private address. What must accompany a private endpoint?

1. A public DNS answer with the assumption that a private endpoint rewrites every client route
2. Correct private DNS resolution and network access to the endpoint
3. Removal of all routes to the endpoint subnet
4. Only a storage-account display-name change