A data platform adds many tables each month. Finance analysts should receive access when tables are classified with approved business-domain and sensitivity tags. The team wants permissions that follow this classification rather than individual grants for every new table. Which actions are appropriate? Select 2 answers.

1. Grant the analyst principals suitable LF-Tag-based permissions whose expressions match only the approved classifications.
2. Grant access to all classifications and rely only on a dashboard label to hide confidential tables.
3. Define and apply the relevant Lake Formation tags to governed catalog resources, with controlled authority to assign classifications.
4. Allow every analyst to change sensitivity tags freely while treating those tags as the sole access boundary.
5. Assume arbitrary S3 billing tags automatically grant Lake Formation table SELECT permissions.