Application rules use FQDNs, and the team wants consistent name resolution between clients and Azure Firewall. Which setting should it evaluate with the appropriate client DNS configuration?

1. Replacing FQDN rules with resource tags
2. Disabling DNS for all clients
3. Azure Firewall DNS proxy
4. Using a load-balancer probe as the DNS server