An organization centralizes audit logs from member accounts. Source administrators should not be able to erase the central history. Which controls support this? Select 2 answers.

1. Treat a trail name as proof that logs arrive without checking delivery.
2. Delete central logs after each source account deployment without regard to retention.
3. Use the appropriate organization trail and dedicated logging-account storage with restricted write and deletion permissions.
4. Give every source administrator unrestricted deletion rights on the central bucket.
5. Apply suitable retention or immutability controls and monitor failures in log delivery.