Question

Information security system must be protected. In case of an attack, it must:
Shutdown once the attack is confirmed
Provide enough information to assess the damage caused by the attack.
do nothing
None of the above

Answer 1

here is your answer shutdown once the attack is confirmed

Answer 2

The system must shutdown once the attack is confirmed so that no further data comprise may be caused by the attack. An attacker must need the system to be ON to perform its operation and therefore, if we shut down the system, the attacker cannot do anything but abort its operation.  

Hence, this is the option by which the damage can be minimized.