A notable fires on the city's 911 CAD server. Why is automatic isolation Adaptive Response usually the wrong next step?
Select an answer to reveal the explanation.
Short Explanation
Auto-isolating 911 CAD is like padlocking the firehouse during a call. Notify a human and get approval on high-availability civic systems. Containment that takes dispatch offline fails the city even if it succeeds in ES.
Full Explanation
When not to use automated containment Adaptive Response includes critical availability systems such as 911 CAD. Prefer notification and human approval so dispatch stays online. AR can target those hosts; CAD is not out of ES scope, and Python playbook authoring is not a legal prerequisite for analyst judgment.