A security analyst is reviewing the following packet capture of communication between a host and a company's router: Which of the following actions should the security analyst take to remove this…

Updating the router code addresses software-level vulnerabilities in the router's firmware; it does not filter or block specific traffic patterns observed in a packet capture.

An Access Control List (ACL) on the router allows the security team to define rules that permit or deny traffic based on source/destination IP, protocol, or port. By creating a deny rule matching the malicious traffic pattern observed in the packet capture, the vulnerability is mitigated at the network layer without disrupting other services or requiring host-level changes.

Disconnecting the host is a disruptive, non-targeted action that eliminates all connectivity rather than selectively blocking the identified malicious traffic.

Antivirus definitions are applied to host-based software to detect malware; they have no effect on router-level traffic filtering.

A network-based IPS can detect and block threats but is a more complex and costly solution than an ACL when a simple traffic rule is sufficient to address the identified vulnerability.