Which security control prevents a Redis instance from being reachable over the public internet?

1. A Requiring TLS
2. ✓ B A private endpoint with public network access disabled (correct answer)
3. C Setting a strong access key
4. D Enabling AOF

Shortcut: A private endpoint places the cache on a private IP inside the VNet; disabling public network access removes the public listener entirely. TLS and keys protect a still-reachable endpoint.