Option 2 is true: classes with identical fully qualified names loaded by different class loaders are treated as different types due to namespace isolation. Option 4 is also true: TrustManager specifically validates authentication credentials like X.509 certificates. Options 1 and 3 are false: type safety doesn't prevent all malicious code, and signed classes aren't automatically granted full access.