What is the MOST effective countermeasure to a malicious code attack against a mobile system?

What is the MOST effective countermeasure to a malicious code attack against a mobile system?

A.
Sandbox

B.
Change control

C.
Memory management

D.
Public-Key Infrastructure (PKI)