A regional outage recovery plan requires a secondary region. Which two items must be addressed explicitly? Select TWO.

1. Data replication or backup availability consistent with the allowed data-loss objective
2. Treat DNS failover alone as proof that learner data has been restored
3. Dependency provisioning, traffic failover, and tested operational procedures
4. Assume the secondary region automatically has every application resource and secret