A team assumes moving to the cloud means it never needs to configure security or plan for failures. Which explanation should an architect give?

1. Customer responsibilities remain and depend on the selected cloud service model
2. All customer responsibility ends as soon as a resource is deployed
3. Security controls are available only in private clouds
4. Microsoft guarantees every customer application cannot fail