How does Chef configuration management enforce a required device configuration?

Chef operates on a pull-based model. The Chef Infra Client, an agent installed on the managed device (node), initiates communication with the Chef Infra Server. During a "Chef run," the client authenticates with the server and requests its configuration. The server then compiles the necessary configuration from the relevant cookbooks, roles, and environments, and sends it to the client. The client then applies this configuration to the device. Option 1 is incorrect because Chef uses a pull model, not a push model initiated by the server. Option 3 is incorrect because the server doesn't just alert; it responds to a client's pull request with the actual configuration. Option 4 is incorrect because while the agent queries the server, the server doesn't push the configuration; the client pulls it.