What is the primary purpose of the containment phase of cybersecurity incident management during an incident response lifecycle for a user account? $($Select the two best options.$)$

a$.$

Identify the root cause of the incident and gather evidence for legal action

b$.$

Remove all traces of the incident from affected systems

c$.$

Limit the immediate impact of the incident while securing data and notifying stakeholders

d$.$

Disable a user account