Confidential information related to Application A, Application B and Project X appears to have been leaked to a competitor. After consulting with the legal team, the IR team is advised to take immediate action to preserve evidence for possible litigation and criminal charges. While reviewing the rights and group ownership of the data involved in the breach, the IR team inspects the following distribution group access lists: Which of the following actions should the IR team take FIRST? A. Remove all members from the distribution groups immediately B. Place the mailbox for jsmith on legal hold C. Implement a proxy server on the network to inspect all outbound SMTP traffic for the DevOps group D. Install DLP software on all developer laptops to prevent data from leaving the network. PLEASE PROVIDE AN EXPLANATION FOR THE CORRECT OPTION CHOICE AS WELL AS EXPLANATIONS FOR WHY THE OTHER OPTIONS ARE NOT CORRECT FOR A THUMBS UP. THANK YOU - DO NOT ANSWER IF YOU ARE NOT SURE

Group Name: product-updates-application-a Members: administrator, app-support, dev-ops, jdoe, jsmith, mpeters Group Name: pending-bug-fixes-application-a Members: administrator, app-support, dev-ops, jsmith, jdoe, mpeters, rwilliams Group Name: inflight-updates-application-b Members: app-support, dev-ops, jdoe, nbrown, jsmith Group Name: Poc-project-x Members: dev-support, product-mgt, jamith, nbrown, rwilliams