A company uses a SaaS business application. Which TWO responsibilities generally remain with the customer? Select TWO.

1. Govern which customer users may access its business data
2. Classify and govern its business data according to its obligations
3. Replace the provider's physical disks
4. Operate the provider's datacenter cooling systems