When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.) 

Answer options:

A. Ensure that the app does not run as PID 1.
B. Package a single app as a container.
C. Remove any unnecessary tools not needed by the app.
D. Use public container images as a base image for the app.
E. Use many container image layers to hide sensitive information.

BC

Reference: https://cloud.google.com/solutions/best-practices-for-building-containers