You have an Azure subscription that contains a Language service resource named ta1 and a virtual network named vnet1. You need to ensure that only resources in ...

You have an Azure subscription that contains a Language service resource named ta1 and a virtual network named vnet1.
You need to ensure that only resources in vnet1 can access ta1.
What should you configure?

A. a network security group (NSG) for vnet1 B. Azure Firewall for vnet1 C. the virtual network settings for ta1 D. a Language service container for ta1