Which statements about containment and eradication are most correct?

Question $3$ Answer

a$.$

Containment and eradication are separate and distinct tasks; once containment is complete, the incident response team moves on to eradication of the causal agent$($s$).$

b$.$

Containment and eradication usually involve the same tools and procedures, and so they often are performed simultaneously.

c$.$

Malware quarantine operations are an example of containment and eradication achieved with the same task.

d$.$

Containment primarily addresses shutting down connectivity between networks, subnets, systems, and servers. Eradication addresses locating the causal agents $($malware$,$ bogus user IDs, etc.$)$ and removing them from each system.