To eliminate public exposure of the database server entirely, which networking option should be chosen at creation?
- A Public access with firewall rules
- B Private access with VNet integration (delegated subnet) (correct answer)
- C Service endpoints
- D Allow Azure services toggle
Shortcut: Private access injects the server into a delegated subnet with a private IP and no public endpoint. Firewall rules still leave a public endpoint reachable.