Users need identity-centric access to private applications without broad network access to every internal destination. Which service should be evaluated?

1. Microsoft Entra Internet Access as the identical private-app connector
2. Azure public DNS alone
3. A public storage container
4. Microsoft Entra Private Access