An administrator wants to reduce accidental deletion of an important Azure resource while allowing authorized updates. Which resource lock best fits?

1. CanNotDelete
2. A DNS TTL
3. ReadOnly
4. A cost budget