A database design needs readable secondary copies in another supported Azure region. The team accepts asynchronous replication and must plan for potential data loss on forced failover. Which capability fits?

1. An NSG rule permitting SQL ports
2. A resource-group tag
3. A local-only backup with no restore process
4. Azure SQL Database active geo-replication