What Salesforce technology should an Integration Architect consider when needing to securely expose an external system User Interface from within the Salesforce UI and provide that system with information about the user?

Northern Trail Outfitters' ERP is integrated with Salesforce and syncs several million contacts per day. To prevent specific data from syncing, the integration uses a SOQL query filtered by sharing hierarchy.
Which two things should an architect do to improve the performance of the integration?
Choose 2 answers

When making an Apex callout, what approach should an Integration Architect recommend for securely transporting sensitive data from Salesforce over an unsecure network connection?

An Architect is required to integrate with an External Data Source via a Named Credential with an Apex callout due to technical constraints.
How is authentication achieved?

Universal Containers is building a managed package to distribute on the AppExchange. As part of the solution they would like to include authentication information (username/password) inside of the package for web service calls made from the package Universal containers web services. A Salesforce security review has flagged this as a security violation and the architect must decide how best to protect these credentials Which two methods should the architect consider in order to protect these credentials?
Choose 2 answers