Two organizations want to control inbound and outbound B2B collaboration and selectively trust supported partner authentication or device claims. Which settings should they evaluate?

1. Cross-tenant access settings
2. A resource-group lock
3. An Azure load-balancer backend pool
4. A public Blob container