At which two container database levels can COMMON Unified Audit Policies be used?

COMMON Unified Audit Policies can only be created at CDB level to monitor DBA operation at any level.

At the CDB level.

At the Application Root level of an Application Container.

At any level by using the COMMON option in the policy.

At the PDB level if the policy is created by a COMMON user.