A tester performs DNS lookups and receives several CNAME aliases pointing to a third-party service. What does this imply for planning?

1. Every CNAME indicates a successful compromise
2. The dependency and ownership boundary should be checked before active testing
3. The third party is automatically part of the client's authorized scope
4. The client necessarily owns the provider's entire address range