CompTIA SecurityX (CAS-005) CAS-005 — Question 354

A SOC analyst is investigating an event in which a penetration tester was able to successfully create and execute a payload. The analyst pulls the following command history from the affected server: $ uname -a && env $ vim foo.c $ gcc foo.c /tmp/lockfile $ chmod +x /tmp/lockfile $ ./tmp/lockfile Which of the following should the analyst implement to improve the security of the server?