Problem Statement
Differentiate between short-term and long-term containment strategies.
Explanation
Short-term containment isolates affected systems quickly — disconnecting hosts or disabling accounts — to stop attack spread.
Long-term containment focuses on building stable configurations such as patching vulnerabilities, hardening access controls, and monitoring recovery systems before returning them to production.