Remote employees need individual VPN access to an Azure VNet from supported laptops. No branch VPN appliance is available. Which connection type should be designed?

1. Site-to-site VPN requiring a branch gateway
2. A public load-balancer rule for all private ports
3. Point-to-site VPN
4. VNet-to-VNet peering from each laptop