A vault private endpoint is configured, but the application cannot retrieve secrets after public access is disabled. What should be checked?

1. Only a larger application VM
2. Only the secret's friendly description
3. Private endpoint approval, DNS, network reachability, and identity permissions
4. Whether the app uses a longer password as the sole network fix