You have an Azure virtual network named VNET$1$ that has an IP address space of $192\mathrm{.}168\mathrm{.}0\mathrm{.}0/16$ and the following subnets:

Subnet$1-$ has an IP address range of $192\mathrm{.}168\mathrm{.}1\mathrm{.}0/24$ and is connected to $15$ VMs

Subnet$2-$ has an IP address range of $192\mathrm{.}168\mathrm{.}2\mathrm{.}0/24$ and does NOT have any VMs connected

You need to ensure that you can deploy Azure Firewall to VNET$1.$

What should you do$?$

Add a new subnet to VNET$1.$

Add a service endpoint to Subnet$2.$

Modify the IP address space of VNET$1.$

Modify the subnet mask of Subnet$2.$