A security analyst has received the following requirements for the implementation of Enterprise credential management software:

- the software must have traceability back to an individual

- credentials must remain unknown to the vendor at all times

- there must be forced credential changes upon ID check out

- complexity requirements must be enforced

- the software must be quickly and easily scalable with a minimum availability

which of the following vendor configurations would best meet these requirements?

1. Credentials encrypted in transit and then stored hashed and salted in a vendor Cloud where the vendor handles Key Management

2. Credentials stored hashed insulted on local machines

3. credentials encrypted in transit and stored in a vendor Cloud where the Enterprise retains the keys

4. credentials encrypted in transit and stored on an internal Network server with backups that are taken on a weekly basis