An organization wants supported applications to react more quickly to critical identity events rather than relying only on ordinary token expiry. Which capability should it evaluate?

1. A weekly access review only
2. Continuous access evaluation
3. A public DNS alias
4. Extending every token indefinitely