Which two statements about security considerations in an SOA environment are true?
1) Firewalls or routers are the mechanisms for securing an SOA business environment.
2) Security policy decisions are made by the service provider.
3) SOA environments are inherently secure and do not require additional security measures.
4) Authentication and authorization are not important in an SOA environment.