A workload must protect sensitive traffic over a private hybrid connection. What is correct?

1. Validate and implement the required supported encryption across the relevant path.
2. A FastConnect circuit always removes application TLS requirements under every policy.
3. A cost allocation tag encrypts every packet.
4. Private IP addresses automatically imply end-to-end encryption.