A customer uses a provider-hosted SaaS application. Which two responsibilities still belong to the customer? Select TWO.

1. Managing who may access the customer's data
2. Replacing the provider's datacenter network switches
3. Classifying the customer's information appropriately
4. Patching the provider's application servers