A policy is granted at a parent compartment. What must a security review consider for child compartments?

1. Applicable permissions can extend to descendants according to the policy scope.
2. Every child is automatically excluded from all parent policies.
3. The grant automatically includes every unrelated tenancy.
4. Child compartment names must be valid passwords.