A Front Door deployment must reach a supported App Service origin through Private Link and restrict direct public origin access. Which Front Door tier and connectivity feature should be evaluated?

1. Front Door Premium with Private Link to the supported origin
2. Traffic Manager with a private DNS record alone
3. NAT Gateway on the client VNet
4. Front Door Standard with an assumed identical Private Link capability