42) During a routine audit a cybersecurity analyst identified a likely data breach It is discovered through a DLP agent that the breach occurred through exfiltration via USB Which of the following activities should be performed FIRST? A) Review the data classification policy B) Initiate incident response C) Create a forensic image D) Analyze volatile memory