When creating a secure container image, which two items should you incorporate into the build if pos

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

A. Ensure that the app does not run as PID 1.

B. Package a single app as a container.

C. Remove any unnecessary tools not needed by the app.

D. Use public container images as a base image for the app.
E. Use many container image layers to hide sensitive information.

Reference: https://cloud.google.com/solutions/best-practices-for-building-containers