A security reviewer assumes encrypted tablespaces always prevent Exadata scan offload. Which statement is correct?

1. Encryption makes all application queries return only ciphertext.
2. Encrypted databases cannot use Exadata storage at all.
3. Every tablespace must be decrypted permanently before any Smart Scan.
4. Supported Smart Scan processing can operate on encrypted tablespace data.