The correct answer is: C. It should be minimal and purpose-built for the application to reduce attack surface and improve performance. A good container base image should be: Small Trusted Regularly maintained Purpose-built Pinned to a specific version or digest Free from unnecessary packages Why not the others? A is wrong because large images increase size and security risk. B is wrong because using latest can cause unpredictable deployments. D is wrong because public images should be reviewed and scanned before use. Answer: C.