Which of these is the best way to address malware?

Monitor common ports used to access systems more carefully than other ports.

Identify malware quickly and remove it$.$

Block all email from unknown senders$.$

Prevent malware from entering the system in the first place.