Q26 Single choice Mark for later Which of the following is the FIRST step in the incident response process? A Determine the cause of the incident B Disconnect the system involved from the network C Isolate and contain the system involved D Investigate all symptoms to confirm the incident Correct answer