A DLP system detects sensitive data leaving an organization in clear text. According to the material, what is the typical policy response?

### Why this is right The material says sensitive data leaving an organization in clear text is typically prohibited and must be blocked. This is a data-handling control applied to information in motion. ### The concept DLP can inspect data being transmitted and compare it with policy. When sensitive information is detected in a prohibited form or destination, the solution may prevent the transfer. This differs from network packet capture, which records traffic for analysis but is not itself the stated policy response. ### The other options - **B. Treat the transmission as acceptable if it uses email.** Email does not make clear-text sensitive data safe. - **C. Capture the full packet and automatically classify the data as nonsensitive.** Packet capture is a traffic-analysis method, and the material does not prescribe this response. - **D. Wait until the data has been stored internally before taking any action.** The risk concerns data leaving the organization, so waiting would fail to address it in motion. ### Terms - **Data in motion**: Information moving between systems or parties. ### Remember Sensitive data sent outside in clear text is typically blocked.