During the containment phase of incident response, which strategy isolates an infected host while preserving forensic evidence?
-
A
Immediate shutdown of the host
-
B
Network segmentation using VLAN or firewall ACL changes
-
C
Reinstalling the operating system
-
D
Disabling all network interfaces permanently