A company detects a known vulnerability after an incident and applies a software update to close it. Which approach does this action most directly illustrate?

### Why this is right The update is applied after an incident has revealed a vulnerability, so the action is reactive. Patching can close a weakness and help prevent the same path from being used again. ### The concept Reactive measures address an incident or its effects after it occurs. Proactive work would seek and address the weakness before exploitation. In practice, organizations use both: an incident may trigger a patch, while ongoing vulnerability management can reduce the chance of future exploitation. ### The other options - **Risk avoidance**: this means stopping an activity that creates a risk, not applying a software update. - **Physical access control**: this limits entry to locations or equipment, not a software weakness. - **Asset identification**: this records what needs protection, but does not itself close a vulnerability. ### Terms - **Reactive cybersecurity**: Work that responds to incidents after they occur. - **Patch**: A software update that fixes a defect or weakness. - **Vulnerability**: A weakness that may be exploited. ### Remember A fix prompted by an incident is reactive, even if it helps prevent a repeat.