A. It ensures that the Incident is resolved, and the threat is NOT continuing to spread to other parts of the environment.

B. It ensures that the Incident is resolved, and the responder can close out the incident in the ATP manager.

C. It ensures that the Incident is resolved, and the responder can determine the best remediation method.

D. It ensures that the Incident is resolved, and the responder can clean up the infection.