Separate application VNets require regional access to one database VNet. Which design is directly relevant?

1. Microsoft Entra group membership alone.
2. VNet peering with appropriate routes, security controls, and private DNS visibility.
3. Azure Front Door forwarding raw SQL traffic to a public database URL.
4. A shared resource-group name with no network connection.