A team needs to prevent sensitive values from leaking through application and model-invocation logs. Which two measures are appropriate? Select 2 answers.

1. Apply access controls, encryption, and retention limits to logs that must contain protected data.
2. Assume encryption at rest prevents authorized log readers from seeing sensitive values.
3. Disable all evidence collection permanently for every application.
4. Classify sensitive fields and minimize or redact them before logging.
5. Make all logs public so unexpected data exposure is easier to notice.