A threat model includes exposure of sensitive data while processed in memory on eligible compute hardware. Which approach best fits?

1. Configure a compatible customer-managed encryption key.
2. Evaluate supported Confidential Computing protections.
3. Enable and validate appropriate transport encryption such as TLS.
4. Verify dependent data and recovery obligations before the approved key destruction.