A database needs private connectivity from a distinct application subnet in the same VNet. Which service boundary is important?

1. Keep database resources in the dedicated delegated subnet and applications in their intended application subnet.
2. Install arbitrary application VMs into the Oracle delegated subnet.
3. Place every Azure subscription inside the backup subnet.
4. Expose all database listeners publicly to avoid subnet separation.