A team needs continuous detection of risky configurations and supported response workflows across its tenancy. Which service should it evaluate?

1. A cost allocation tag used as the only control.
2. Cloud Guard with suitable targets, detector recipes, and responder recipes.
3. Object Storage multipart upload.
4. A NAT gateway with no monitoring configuration.