An IT security engineer notices that the companys web server is currently being hacked. What should the engineer do next?


A. Unplug the network connection on the companys web server.
B. Determine the origin of the attack and launch a counterattack.
C. Record as much information as possible from the attack.
D. Perform a system restart on the companys web server.