To ensure EHR passes a privacy compliance audit, which actions should you take? (Choose two.)

For privacy compliance, especially with sensitive data like Electronic Health Records (EHR), it's crucial to use Google Cloud products that meet relevant standards. Verifying product usage against Google Cloud's compliance list ensures that the underlying services are certified for handling such data. Additionally, a Business Associate Agreement (BAA) is legally required under regulations like HIPAA when a cloud provider handles protected health information (PHI) on behalf of a covered entity. Firebase Authentication is a good security practice but doesn't directly address broader privacy compliance. Prometheus is for monitoring, not breach prevention. GKE private clusters enhance security but aren't a standalone solution for overall privacy compliance.