In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?

In Docker Trusted Registry, how would a user prevent an image, for example ‘nginx:latest’ from being overwritten by another user with push access to the repository?

In Docker Trusted Registry, how would a user prevent an image, for example ‘nginx:latest’ from being overwritten by another user with push access to the repository?
A . Tag the image with ‘nginx:immutable’
B . Remove push access from all other users.
C . Use the DTR web UI to make the tag immutable.
D . Keep a backup copy of the image on another repository.

Answer: C