A Step Functions Standard workflow submits a human-review request and must resume only after the authorized review completes. Which implementation choices fit the callback pattern? Select 2 answers.

1. Use a supported task-token callback integration and return the outcome using the appropriate callback API.
2. Publish the task token publicly so any visitor can approve the transaction.
3. Use a fixed delay as proof that a human approved the request.
4. Protect the task token, validate who may approve, and configure a suitable timeout and failure path.
5. Leave the task waiting forever and omit all recovery for abandoned reviews.