A company has just created an AWS account. Which TWO practices help protect its root user? Select TWO.

1. Enable multi-factor authentication for the root user.
2. Avoid creating root access keys and use other identities for routine work.
3. Embed root access keys in application source code.
4. Share the root password with all developers for convenient access.
5. Disable MFA so automated integrations can sign in as root.