One application VNet resolves the database but a peered VNet does not. Which check is most useful?

1. Increase the Marketplace purchase quantity.
2. Verify private-zone links or forwarding for the application's actual resolver path.
3. Rotate all database datafile encryption keys immediately.
4. Change the database's optimizer mode.