Defender for Cloud raises an alert on an internet-facing production workload. What should determine response priority?

1. Alert evidence, exposure, asset criticality, and related attack context
2. Whether a development resource has more tags
3. The alert's alphabetical position
4. The age of the subscription alone