An internal application name must resolve inside the VCN but must not be published in public DNS. What should the architect evaluate?

1. An internet gateway security rule for UDP 53 as the entire design.
2. A budget tag whose key is the hostname.
3. Private DNS zones and resolver views associated with the intended clients.
4. Only a public A record with a note saying private.