Which of the following are preventive internal controls?

Requiring management to formally approve certain types of transactions.

Separating responsibilities related to authorizing transactions, recording transactions, and maintaining custody of the related assets.

Using cameras, locks, and physical barriers to protect assets.

Using passwords to restrict electronic access.