You have an on-premises Windows Server named Server1 and an Azure subscription with a virtual network named VNet1. You plan to connect Server1 to VNet1 by using Azure Network Adapter. To minimize the time required to deploy the adapter to Server1, which resource should you create first?

To connect an on-premises server to an Azure virtual network using Azure Network Adapter, you need an Azure VPN gateway. The Azure Network Adapter (part of Azure Point-to-Site VPN client) establishes a secure connection to the Azure VNet via the VPN gateway. Therefore, the VPN gateway must be deployed first to provide the necessary endpoint for the connection. A route server is used for dynamic routing between a virtual network gateway and a network virtual appliance (NVA), not for direct server-to-VNet connectivity. An Azure Bastion host provides secure RDP/SSH access to Azure VMs directly from the Azure portal, which is unrelated to connecting an on-premises server. A private endpoint allows private access to Azure services from within a VNet, but it doesn't facilitate on-premises server-to-VNet connectivity.