A large network estate needs centrally governed security rules across supported VNets while local teams maintain their NSGs. Which capability should be evaluated?

1. Virtual Network Manager security admin rules
2. A single user's browser bookmark
3. A model deployment quota
4. A storage lifecycle rule