312-39V2: Certified SOC Analyst v2

Sarah, a financial analyst at a multinational corporation, is suspected of disclosing sensitive financial data to an unauthorized external party. The SOC team has identified abnormal data-transfer patterns from her account, flagged by the SIEM system, that indicate possible data exfiltration. The SOC’s incident response team has been assigned to contain the incident quickly to minimize data loss and safeguard critical assets. As a SOC analyst, which of the following should be prioritized as the initial containment measure to address this threat?