A web server is attacked and compromised. Which of the following should be performed FIRST to handle the incident? 
A、Dump the volatile storage data to a disk. 
B、Run the server in a fail-safe mode. 
C、Disconnect the web server from the network. 
D、Shut down the web server.