Option A is incorrect because virtual network NAT gateway integration outbound Internet connectivity; in this scenario, we would need an inbound connection.
Option B is correct, as hybrid connections can be created directly in Azure app services to connect to your on-premises resources. It uses static TCP ports.
Option C is incorrect because You can set up a vnet integration with Azure vnet or an on-premise network, but you would need a site-to-site VPN, which is unavailable.
Option D is incorrect because a private endpoint provides connections to Azure services, not on- premises resources.
Reference:
https://docs.microsoft.com/en-us/answers/questions/701793/connecting-to-azure-app-to-onprem- datbase.html