An Azure SQL Database application needs a stable connection endpoint that can direct connections to the primary after a supported geographic failover. Which capability should the architect evaluate?

1. A database backup file used directly as the production listener
2. A resource lock on the old database only
3. A public DNS TXT record containing a password
4. A failover group with its read-write listener