A critical service depends on one DNS provider and one identity provider. What should a resilience assessment include?

1. Only the application's CPU utilization
2. Only the number of application replicas
3. Failure and recovery of those shared dependencies
4. A guarantee that external providers never fail