A branch office needs encrypted connectivity to an Azure virtual network across the public internet. Which Azure service is designed for this?

1. Azure VPN Gateway
2. Azure ExpressRoute alone
3. Azure DNS
4. Azure Advisor