An application encrypts large documents using envelope encryption. Which statements correctly describe the roles of KMS and the data key? Select 2 answers.

1. Store the encrypted data key with the ciphertext so an authorized process can later request its decryption.
2. Use the plaintext data key locally to encrypt the document, then discard the plaintext key appropriately.
3. Treat the KMS key alias text as the plaintext document encryption key.
4. Assume every large payload must be passed directly to the KMS Encrypt API without size limits.
5. Store the plaintext data key beside the ciphertext in a publicly readable object.