CompTIA Security+ SY0-701 Practice Question

Quarantine procedures may involve network isolation, but powering off a system is not always required or recommended. Keeping the system on allows for volatile data preservation, which is essential for forensic analysis. It also enables ongoing monitoring and potential capture of additional threat behavior. The main objective of quarantine is to prevent the spread of a threat, which can often be accomplished without shutting down the system.