Which of the following are the basic characteristics of declarative security? Each correct answer represents a complete solution. Choose all that apply.

Declarative security is often container-managed, meaning the application server or runtime environment enforces the security constraints defined externally.

It operates within a runtime environment, where the container or framework interprets and enforces the specified security constraints during application execution.

A core characteristic is that security constraints, such as access control rules or authentication methods, are explicitly stated in configuration files or annotations, separate from the business logic.

While security policies are often configured or loaded during deployment, their enforcement happens continuously at runtime by the container or environment, not solely at the deployment time itself.