An organization wants supported visibility for another-cloud workloads in Defender for Cloud. What should the connector design enforce?

1. Ignore which account the connector targets
2. The documented trust, permissions, scope, and onboarding requirements
3. Public disclosure of the other cloud's root credential
4. Assume a resource name creates the cross-cloud trust