The defense step before an attack is **Attack prevention**. This involves implementing measures to stop an attack from occurring in the first place. The other options relate to responding to or managing an attack after it has been identified or occurred.


