A developer writes a report query containing a page-item value. Which pattern is appropriate for the value predicate?

1. Grant the visitor CREATE ANY TABLE
2. Use a bind reference such as :P10_DEPARTMENT_ID
3. Concatenate the unvalidated item directly into executable SQL
4. Put the value into the report's static region title