A regulated workload needs a repeatable OCI foundation. Which TWO activities belong in its landing-zone design? Select TWO.

1. Define compartment boundaries and administrative roles.
2. Treat the reference template as proof that every application is compliant.
3. Grant all deployment pipelines unrestricted tenancy administration permanently.
4. Configure network isolation and integrated security monitoring.