Which of the following is the MOST appropriate next step in the incident response plan?

exams CS0-002 CS0-002 exam 0 Comments

A company’s modem response team is handling a threat that was identified on the network Security analysts have as at remote sites.

Which of the following is the MOST appropriate next step in the incident response plan?
A . Quarantine the web server
B . Deploy virtual firewalls
C . Capture a forensic image of the memory and disk
D . Enable web server containerization

Answer: B