A team compares a storage service endpoint with a storage private endpoint. Which distinction is correct?

1. A private endpoint gives a private IP interface; a service endpoint secures access to the service's public endpoint
2. Both features necessarily allocate a private IP in the client's subnet
3. Service endpoints automatically make every external client private
4. Private endpoints replace every DNS requirement