You have an on-premises network.

You have an on-premises network.

You have an Azure subscription that contains an Azure Cosmos DB account named account1 and an Azure virtual network named VNet1. VNet1 contains two virtual machines named VM1 and VM2. VNet1 is connected to the on-premises network by using a Site-to-Site (S2S) VPN.

You need to meet the following requirements:

• Block access to the public endpoint of account1.

• Allow only VM1 to access account1.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.