An incident review finds that a replicated dataset was copied outside approved regions. Which preventive control most directly addresses the cause?

1. Encrypt network traffic while allowing any destination region
2. Configure regional dashboards without placement enforcement
3. Apply shorter application session timeouts
4. Enforce approved placement for primary storage, replicas, and backups