To enhance network security for Azure Databricks while ensuring connectivity to Azure services and on-premises datacenters, which combination of Azure networking features should be implemented?