A team needs predictable OCI connectivity but also mandates encryption in transit. What must the architect establish about a proposed FastConnect solution?

1. That private IP addresses make payload encryption unnecessary under every policy.
2. That enabling a cost tag encrypts the circuit.
3. That every FastConnect circuit automatically encrypts every end-to-end application flow.
4. Which supported encryption mechanism covers the required path and how its keys are managed.