Two VNets in different Azure regions need private connectivity with non-overlapping prefixes. No on-premises routing or encrypted internet tunnel is required. Which option best minimizes connectivity infrastructure?

1. Global VNet peering
2. A site-to-site VPN gateway in each VNet
3. ExpressRoute circuits at both locations
4. Public load balancers on both VNets