A network policy allows only approved client locations. What does it primarily control?

1. Warehouse auto-scaling concurrency
2. Which rows a SQL query returns by business region
3. Connection access based on configured network criteria
4. Which columns are masked