Q63
Single choice
A security analyst observes a daily traffic spike from the same subnet with a history of DDoS and reconnaissance flags.
What should the analyst do first?