How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?

How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?
A . by adding the device’s Host ID to a quarantine list and configure GlobalProtect to prevent users from connecting to the GlobalProtect gateway from a quarantined device
B . by using secunty policies, log forwarding profiles, and log settings.
C . by exporting the list of quarantined devices to a pdf or csv file by selecting PDF/CSV at the bottom of the Device Quarantine page and leveraging the approbate XSOAR playbook
D . There is no native auto-quarantine feature so a custom script would need to be leveraged.

Answer: A