A developer wants Copilot to retrieve a ticket from the team's issue-tracking service during implementation. The service exposes an approved MCP server. Which two steps are appropriate? Select 2 answers.

1. Configure the approved MCP connection in a supported Copilot environment.
2. Disable organization policy checks so the server can register itself.
3. Assume that naming the service in a prompt automatically creates an authenticated integration.
4. Limit the connection's permissions to the ticket data and actions needed for the task.
5. Paste a long-lived administrator token into the repository instruction file.