You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.
You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.
You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:
* Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.
* Restrict network connectivity to SqlSrv1.
What should you create on VNet1?