A database must be accessible only through the organization's private VCN connectivity. Which option should be evaluated?

1. A private endpoint with the required subnet and security configuration
2. Removing all DNS records while retaining a public endpoint
3. A public endpoint protected only by a difficult-to-guess hostname
4. A public wallet download link with no access restrictions