Users may read sales rows but must not discover a sensitive salary column in the semantic model. Which control addresses column and metadata visibility?

1. A bookmark hiding the salary visual
2. A report visual filter only
3. A model display folder
4. Object-level security