After a security incident involving an exploited vulnerability due to outdated software, a security analyst applies patch updates. Which of the following steps does this task relate to?
1) Identifying the vulnerability
2) Implementing firewall rules
3) Updating antivirus software
4) Applying software patches