A cloud assessment identifies a public object-storage endpoint in a client repository. What should precede any attempt to retrieve content?

1. Change the resource's access policy before contacting the client
2. Verify that the account or resource is included in scope and define permitted access
3. Test unrelated buckets with similar names first
4. Download every object because the endpoint was published