Which two options are required by GDPR when requesting marketing consent from customers?

According to the General Data Protection Regulation (GDPR), which is a law that protects the personal data and privacy of individuals in the European Union, when requesting marketing consent from customers, you must comply with the following requirements:

Records must be kept to show the details of the consent given, such as who, when, how, and what you told them.

Marketing consent must be separate from terms & conditions acceptance, and not a precondition of signing up to a service.

Opt-in boxes must not be pre-ticked, and customers must have a clear and affirmative action to give their consent.

Multiple marketing consents must be done with separate opt-ins for each purpose or channel.

References: https://gdpr.eu/email-consent/