Staff need identity-centric access to specified private applications without broad access to every internal network resource. Which service should be considered?

1. A resource lock as a network path
2. An unrestricted full-network connection as the only possible design
3. Microsoft Entra Private Access
4. A public storage container