A finance team wants an alert when forecast Azure spending approaches its monthly budget. Which capability should it configure?

1. A read-only resource lock
2. A virtual network service endpoint
3. A DNS alias record
4. A Cost Management budget with alert thresholds