An action is configured to use a particular connection. Why must its identity model be understood?

1. A connection name alone proves least privilege
2. Authentication mode does not affect data exposure
3. The connection determines which authority reaches the backend
4. Every connection automatically impersonates the correct user in every service