When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)
A . Ensure that the app does not run as PID 1.
B . Package a single app as a container.
C . Remove any unnecessary tools not needed by the app.
D . Use public container images as a base image for the app.
E . Use many container image layers to hide sensitive information.

Answer: B,C

Explanation:

Reference: https://cloud.google.com/solutions/best-practices-for-building-containers