During the Containment phase of incident response in the cloud, which action is most appropriate first?

Pick an option to reveal the answer.