A tester can read a cloud storage container because its policy permits anonymous access. What proof best respects a rule to minimize sensitive-data collection?

1. Download the entire container to a personal device
2. Retrieve an approved non-sensitive marker or use minimally sufficient access evidence
3. Publish the container URL immediately
4. Delete a sample of production objects