An employee uses hotel Wi-Fi to access an internal application. Which control protects the remote network connection?

1. A hidden hotel SSID
2. A shorter DHCP lease
3. A public DNS alias
4. An approved VPN