A healthcare company has a mission-critical application that requires an RPO of 1 hour and an RTO of 4 hours. Which disaster recovery strategy would you recommend to meet these requirements?