An instance needs a secondary VNIC in another VCN. Which placement constraint must be satisfied?

1. The second VCN must be in a different region.
2. The VNIC must belong to the same compartment as every DNS zone.
3. The secondary VNIC must replace the primary VNIC.
4. The secondary VNIC's subnet must support the instance's availability domain.