Test your knowledge: Orchestrators and security of containers — Question 2

A company uses container images for its applications. To prevent container drift, they want to implement a strategy that ensures no new executables can be added after the container image has been created. Which option should the company use to prevent container drift?