Which action(s) will result in a provisioning plan to remove entitlement A from Joe's account?
1) During a manager cert Joe's manager revokes entitlement A
2) Joe has entitlement A due to an access profile assignment with the active lifecycle state. Joe's lifecycle state changes to inactive, which is configured to deprovision all access and disable all accounts
3) Joe has entitlement A because it was part of Role B. Role B applies only to identities in the services department. Joe recently transferred to the Engineering department.
4) All of the above