Exam Certified Integration Architect topic 1 question 23 discussion

A healthcare services company maintains a Patient Prescriptions System that has 50+ million records in a secure database. Its customer base and data set is growing rapidly. The company wants to make sure that the following policies are enforced:
1. Identifiable patient prescriptions must exist only in the company's secure system's database and encrypted at rest.
2. Identifiable patient prescriptions must be made available only to people explicitly authorized in the Patient Prescriptions System. Assigned nurses and doctors, the patient, and people authorized by the patient.
3. Must be available only to verified and pre-approved people or legal entities.
To enable this, the company provides the following capabilities:
1. One-time use identity tokens for patients, nurses, doctors, and other people that expire within a few minutes.
2. Certificates for legal entities.
3. RESTful services.
The company has a Salesforce Community Cloud portal for patients, nurses, doctors, and other authorized people. A limited number of employees analyze de-identified data in Einstein Analytics.
Which two capabilities should the integration architect require for the Community Cloud portal and Einstein Analytics? (Choose two.)