A stateful application is placed across fault domains in one availability domain. Which failure is still outside that protection boundary?

1. Maintenance affecting only one fault domain.
2. Loss of the entire availability domain.
3. A single instance restart when another healthy replica exists.
4. An isolated physical host failure.