A dashboard includes a text prompt whose value is used in a query expression. Which two controls are important? Select TWO.

1. Validate expected input and use supported variable binding semantics
2. Put a database password in the prompt default
3. Treat the prompt value as proof of the user's department
4. Retain model-level data access restrictions