A support engineer wants to prevent users from running malware on several IaaS compute instances. Which of the following will BEST achieve this objective?

A. Encrypt all applications that users should not access.
B. Set the execute filesystem permissions on the desired applications only.
C. Implement an application whitelisting policy.
D. Disable file sharing on the instance.