An operator accidentally deletes business data, and the deletion propagates to all replicas. Which protection should the architect have designed in addition to replication?

1. A lower DNS TTL only
2. More replicas of the same immediately updated data only
3. More application worker instances only
4. Retained recoverable historical copies with tested restoration