A deployment diagnostic process records complete environment variables and tokens in logs. Which changes improve the security of operational evidence? Select 2 answers.

1. Limit log access and retention and preserve useful safe correlation and audit metadata.
2. Delete all incident metadata while retaining full plaintext secrets.
3. Make all production diagnostic logs public so credentials are easy to inspect.
4. Base64-encode every secret and call the result anonymous.
5. Minimize and redact sensitive content before logging, using supported log data-protection features where appropriate.