A company needs policy-based investigation of potentially risky insider behavior with appropriate privacy and reviewer controls. Which capability fits?

1. Insider Risk Management
2. A storage account access tier
3. A shared user password
4. A DNS failover rule