A. The private endpoint gives hosts within your Virtual Cloud Network access to a given service within Oracle Cloud Infrastructure.

B. You cannot use the private endpoint for hosts in the on-premises network.

C. You can enable private access to certain services within OCI from your Virtual Cloud Network by using either a private endpoint or a service gateway.

D. Traffic from an OCI compute instance going through a Service Gateway to Object Storage is routed without being sent over the internet.