Traffic from a VM follows an unexpected path. The engineer wants to identify Azure's selected next hop for a destination. Which tool is the direct fit?

1. A storage diagnostic setting
2. Network Watcher next hop
3. IP flow verify
4. A public DNS zone export