An offsite backup is accessible using the same compromised administrator identity as production. What weakness is present?

1. Insufficient isolation of recovery access
2. Excessive separation of duties
3. Too many independent restore tests
4. A guaranteed RPO violation already occurred