CompTIA SecurityX (CAS-005) CAS-005 — Question 391

An organization receives intelligence information about a foreign adversary targeting instances of a web server application that the organization uses. The information includes: • The originating IP addresses of the attack • The common commands run on the affected device • The indicators that a device has been affected • The actions that can be taken on the device to stop the attack Which of the following should the organization do first?