What is incident containment and which two strategies can achieve it in a cyber-physical system?

What is incident containment and which two strategies can achieve it in a cyber-physical system?

• A. Containment is the process of restoring systems after an incident.
• B. Containment involves legal actions against attackers.
• C. Containment limits the spread of a breach; strategies include patching all systems.
• D. Containment limits the spread of breach; strategies: network isolation of affected segments; kill-switches in ICS.

Answer: (D)