A security Operations Center was scanning a subnet for infections and found a contaminated machine.
One of the administrators disabled the switch port that the machine was connected to, and informed a
local technician of the infection. Which of the following steps did the administrator perform?
A.
Escalation
B.
Identification
C.
Notification
D.
Quarantine
E.
Preparation