A security team needs to implement network segmentation for Azure AI services to ensure that Azure AI Search, Azure OpenAI, and Azure Machine Learning can communicate with each other privately, while remaining isolated from the internet. Which combination of controls achieves this?

The correct combination is deploying all services with private endpoints in the same VNet, configuring Private DNS Zones for each service, and disabling public network access on all resources. Deploying private endpoints for each AI service (Azure AI Search, Azure OpenAI, Azure Machine Learning) within the same VNet ensures all inter-service traffic uses private IP addresses over the Microsoft backbone. Private DNS Zones ensure that each service's FQDN resolves to the private IP address rather than the public IP. Disabling public network access removes the public endpoint, ensuring no internet exposure. The option that configures VNet service endpoints for each AI service and restricts NSG outbound rules is wrong because VNet service endpoints restrict traffic to the service over the Microsoft backbone from the VNet but do not create private IP mappings, and the services may still accept public traffic. The option that uses Azure Application Gateway with WAF in front of all AI services is wrong because Application Gateway with WAF is a reverse proxy for inbound internet traffic, not a mechanism for private inter-service communication. The option that enables Azure Private Link Service on the AI services and exposes only port 443 is wrong because Private Link Service is for exposing your own services to other VNets (provider side), not for consuming Azure PaaS services privately.