A site needs an additional supported restriction limiting access to a designated group, alongside normal site permissions. Which SharePoint capability should be evaluated?

1. A sensitivity label assumed to grant every group member access automatically
2. A lower DNS TTL
3. A new site title
4. Restricted access control with the required supported configuration