Your on-premises network contains a DNS server named Server1.
You have an Azure subscription that contains the resources shown in the following table.

The on-premises network is connected to VNet1 by using a Site-to-Site (S2S) VPN.
You need to ensure that Server1 can resolve the DNS name of storage1. The solution must minimize costs and administrative effort.
What should you use?

A. Azure DNS Private Resolver B. an Azure public DNS zone C. an Azure Private DNS zone D. an Azure virtual machine that hosts a DNS service