A global company has an incident response team for cybersecurity incidents threatening sensitive data and operations. An automated alert notifies the team of potential unauthorized access to a server that stores customer data. The team confirms the alert and begins the incident response process. What is the primary objective of the containment phase in this cycle?

a$.$

To fully restore affected systems from secure backups

b$.$

To analyze the threat intelligence gathered during the incident

c$.$

To identify the type of incident and impacted resources

d$.$

To isolate the attack to prevent further exploitation