A learning service must survive failure of one availability domain where the selected region supports multiple domains. Which design is appropriate?

1. Assume every OCI region always contains exactly three availability domains
2. Create different application usernames on the same failed host
3. Distribute suitable application and data components with explicit cross-domain recovery behavior
4. Place all replicas and all data on one host in that domain