When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)
A . Ensure that the app does not run as PID 1.
B . Package a single app as a container.
C . Remove any unnecessary tools not needed by the app.
D . Use public container images as a base image for the app.
E . Use many container image layers to hide sensitive information.

Answer: BC

Explanation:

Reference:

https://cloud.google.com/solutions/best-practices-for-building-containers

https://cloud.google.com/architecture/best-practices-for-building-containers#solution_1_run_as_pid_1_and_register_signal_handlers