A company centralizes network logs in a security account. Which controls best protect the logs as audit evidence? Select 2 answers.

1. Use suitable retention or Object Lock controls for immutable evidence where required.
2. Restrict write and read permissions and separate log administration from workload administration.
3. Let every workload administrator permanently delete all central log objects.
4. Store all logs in a public bucket so integrity is guaranteed by visibility.
5. Use only a descriptive bucket name instead of retention and access controls.