What is the purpose of containment in incident response?

• A.To collect enough evidence for the card brands by keeping compromised systems online and logging attacker activity until the PFI arrives
• B.To restore normal operations by rebuilding affected servers and returning them to production quickly
• C.To limit the scope and impact of a security incident by isolating affected systems and preventing further damage or data exposure
• D.To identify the attacker's entry point and remove the malware from the affected hosts