A service has primary and secondary public endpoints. An approved recovery procedure calls for Route 53 to return the secondary when the primary health check fails, rather than distributing normal traffic between them. Which routing policy should operations configure?

1. Simple routing with one record containing both endpoint addresses and no health evaluation.
2. Failover routing with PRIMARY and SECONDARY records and the appropriate health evaluation.
3. Weighted routing with equal weights and no health checks.
4. Geolocation routing solely according to client country.