Two CloudWatch metric alarms monitor high request latency and elevated HTTP 5xx responses for an API. Operations wants one SNS notification only when both alarms are in ALARM. Individual alarms should continue to evaluate but should not send their own notifications. Which changes should the engineer make? Select 2 answers.

1. Replace AND with OR so that both underlying metrics must breach simultaneously.
2. Disable actions on the composite alarm and retain SNS actions only on the underlying alarms.
3. Combine the two metric values by addition and alarm whenever their sum is greater than zero.
4. Remove the SNS actions from the underlying metric alarms.
5. Create a composite alarm with ALARM(latency) AND ALARM(errors) and configure its SNS notification.