A network has been infected with a worm. Which of the following would be the BEST security measures to take? (Choose two.)

While IPS (Intrusion Prevention System) signatures can help detect network-based attacks, updating general IPS signatures might not be as directly effective against an already active, propagating worm as updating specific malware definitions.

Updating the network firewall typically involves rules for inbound/outbound traffic, which is a proactive measure but may not be the immediate best action to remove an existing worm infection or stop its internal spread.

Worms are a type of malware, so updating malware definitions on antivirus software, endpoint detection and response (EDR) systems, or other security tools is crucial to ensure these systems can identify and mitigate the specific worm variant.

Quarantining the infected network or isolating compromised hosts prevents the worm from spreading further to other systems or network segments, effectively containing the outbreak and limiting its damage while remediation efforts take place.

Resetting the network router might disrupt network services but does not inherently remove a worm from infected hosts or update security tools to prevent reinfection.

Contacting the ISP might be necessary if the worm is causing external network issues or bandwidth consumption, but it's not an immediate internal security measure for containing and removing the infection.