Which of the following would be the BEST way to analyze diskless malware that has infected a VDI?

After reading a security bulletin, a network security manager is concerned that a malicious actor may have breached the network using the same software flaw. The exploit code is publicly available and has been reported as being used against other industries in the same vertical. Which of the following should the network security manager consult FIRST to determine a priority list for forensic review?

While reviewing the wireless router, a systems administrator of a small business determines someone is spoofing the MAC address of an authorized device.
Given the table below:

Which of the following should be the administrator's NEXT step to detect if there is a rague system without impacting availability?

A user forwarded a suspicious email to the security team, Upon investigation, a malicious URL was discovered. Which of the following should be done FIRST to prevent other users from accessing the malicious URL?

A Chief Information Officer is concerned about employees using company-issued laptops to steal data when accessing network shares. Which of the following should the company implement?