Câu 102: CV0-003: CompTIA Cloud+

During a security incident, an IaaS compute instance is detected to send traffic to a host related to cryptocurrency mining. The security analyst handling the incident determines the scope of the incident is limited to that particular instance. Which of the following should the security analyst do NEXT?

1. A. Isolate the instance from the network into quarantine — đáp án hiện tại
2. B. Perform a memory acquisition in the affected instance
3. C. Create a snapshot of the volumes attached to the instance
4. D. Replace the instance with another from the baseline