Which of the following steps did the administrator perform?

A security Operations Center was scanning a subnet for infections and found a contaminated
machine. One of the administrators disabled the switch port that the machine was connected to,
and informed a local technician of the infection. Which of the following steps did the administrator
perform?

A.
Escalation

B.
Identification

C.
Notification

D.
Quarantine

E.
Preparation