What are two ways that a CASB solution can provide security for cloud applications without being in the data path? $($Choose two.$)$

by providing logging and event data about the cloud application environment and user activity

by leveraging API calls between the CASB and the cloud applications

by redirecting users to secure authentication portals

by negotiating encryption suites between the cloud application and the consumer, on behalf of the cloud application