Which of the following is considered a proactive security measure?

Training employees on security protocols is considered a proactive security measure because it focuses on prevention rather than reaction. By equipping employees with knowledge about security best practices, potential threats, and proper responses to security incidents, organizations can significantly reduce the likelihood of a security breach occurring. This preventative approach helps create a security-aware culture within the organization, empowering employees to act as the first line of defense against security threats.

In contrast, the other choices primarily emphasize reactive strategies or responses. Monitoring network traffic is essential for detecting issues after they arise, and responding to security breaches deals directly with incidents that have already occurred. Running antivirus scans periodically, while important for maintaining security, mainly serves to identify and mitigate threats rather than preventing them through education and awareness efforts.