Refer to the exhibit.

An engineer is investigating an issue by using Cisco Secure Cloud Analytics. The engineer confirms that the connections are unauthorized and informs the incident management team.

Which two actions must be taken next? (Choose two.)

Select all that apply.

• A

  Reinstall the host from a recent backup.

• B

  Quarantine the host

• C

  Reinstall the host from scratch.

• D

  Create a firewall rule that has a source of linux-gcp-east-4c, a destination of Any, and a protocol of
  SSH.

• E

  Create a firewall rule that has a source of Any, a destination of linux-gcp-east-4c, and a protocol of
  SSH.