which of the following phases of incident response?

Searching for systems infected with malware is considered to be which of the following phases of incident
response?

A.
Containment

B.
Preparation

C.
Mitigation

D.
Identification