Which actions should a solutions architect take lo protect and secure CloudTrail?

A company wants to migrate its accounting system from an on-premises data center to the AWS Cloud m a single AWS Region. Data security and an immutable audit log are the top priorities. The company must monitor all AWS activities for compliance auditing. The company that enabled AWS CloudTrail but wants to make sure it meets meat requirements

Which actions should a solutions architect take lo protect and secure CloudTrail? (Select TWO.)
A . Enable CloudTrail log file validation.
B . Enable the CloudTrail Proceeding Library.
C . Enable logging of Insights events in CloudTrail.
D . Enable custom logging from the on-premises resources
E . Create an AWS Config rule to monitor whether CloudTrail is configured to use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)

Answer: A,E