Which two options provide implicit record access to users? Choose 2 answers

Universal Containers is updating its Organization-Wide Sharing Settings for the Account Object from a
"Public Read/Write" model to a "Private" model, so that they can hide certain national accounts from sales reps and sales managers. These national accounts should only be accessible by sales directors and above.
Universal Container's Role Hirerarchy matches its organizational hierarchy.
Which two options should the Architect consider when designing the solution?
Choose 2 answers

Universal Containers has a strict security model enforced through object, field, and row-based security mechanisms. The Architect would like to ensure the security model is being thoroughly tested using Apex automated tests.
Which three considerations should be made when using the runAs() method to design Apex unit tests?
Choose 3 answers

Universal Containers (UC) is implementing Sales Cloud. During the final quarter of the financial year, sales managers help each other close deals. They requested a solution in Salesforce to allow them to share opportunities with other sales managers from different teams as needed. They also requested that sharing deals should expire automatically two weeks after the new fiscal year starts.
Which two options to propose a solution to meet the requirements? (Choose two.)

Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.What should the Architect do in order to make sure Universal Health stays compliant?