A datacenter needs private provider-based network connectivity to Azure with predictable routing and no public-internet transport for that circuit. Which service should be evaluated?

1. Point-to-site VPN for each server as the same private circuit
2. Azure DNS alone
3. Azure Application Gateway alone
4. Azure ExpressRoute