A dataset may be stored only in approved AWS Regions. A team proposes cross-Region replication and disaster-recovery backups. Which review is necessary before enabling those features?

1. Ignore the destination Region if the object is encrypted.
2. Verify that every configured replication and backup destination satisfies the dataset location policy and enforce access and governance controls for those destinations.
3. Assume the source bucket Region guarantees that every replica and backup remains in that Region.
4. Enable every available destination first and review location restrictions only after a compliance incident.