Corporate clients must resolve an OCI private zone. What should the hybrid DNS design include?

1. Assume private zones automatically publish to every corporate resolver.
2. Supported resolver endpoints and conditional forwarding with network reachability and filtering.
3. Add a public address to every private database.
4. Replace every DNS query with an IAM policy.