Agents run in a private network but call a knowledge service. Which two boundaries must remain enforced? Select TWO.

1. Identity-based authorization for the specific data and operations
2. Trust every process on the subnet as a global administrator
3. Treat a resource name as an authentication credential
4. A supported reachable network and DNS path to the intended service