How would you answer an interview scenario involving Azure Virtual Network in Microsoft Azure?

For a three-tier application using App Service, API, and Azure SQL, explain private connectivity, DNS, subnet design, and ingress/egress controls.