An incident response team has detected an infected virtual machine that is sending beacons to an extemal C2 server Which of the following is the NEXT step to perform further investigation? Run the contig command and disable the virtual NIC A B Run the rousel > route. text command and take a snapshot before disabling the virtual NIC at the hypervisor Disable the virtual NIC and freeze the virtual machine to move to another server for further investigation D Mave the virtual machine to another server isolating it from the network