In which phase of incident response does an organization take actions to limit the ability for attackers to continue compromising other network resources, communicating with command and control infrastructures, or exfiltrating confidential data?

Question $7$ options:

Preparation

Detection

Containment

Eradication and Recovery