Which Two Steps Must an Incident Responder Take to Isolate

Multiple Choice

Which two steps must an Incident Responder take to isolate an infected computer in ATP? (Choose two.)

A) Close any open shares
B) Identify the threat and understand how it spreads
C) Create subnets or VLANs and configure the network devices to restrict traffic
D) Set executables on network drives as read only
E) Identify affected clients