A company stores CloudTrail logs centrally and wants to detect whether delivered log files were modified or deleted after delivery. Which controls provide relevant evidence? Select 2 answers.

1. Treat enabling validation as proof that no periodic validation process is needed.
2. Protect the log destination with restricted access and suitable retention controls.
3. Enable log file integrity validation and validate the delivered digest chain.
4. Use object names alone as cryptographic proof of unchanged contents.
5. Permit workload administrators to delete both logs and digests at will.