A support engineer needs remote control of a user's screen. What should occur before the session begins?

1. Disable audit logging for the session
2. Start recording secretly to save time
3. Verify identity, explain the session, and obtain required consent
4. Ask for the user's password in a public chat