A DLP Administrator Is Writing One Policy to Block Sensitive

Multiple Choice

A DLP administrator is writing one policy to block sensitive data from being copied to removable media. The administrator is applying two response rules to the policy: 'Endpoint Prevent: Notify' and 'Endpoint Prevent: Block'. Why are some copies blocked while others are only notified?

A) there are different conditions for the different response actions
B) the monitor and ignore filters are defined incorrectly
C) the DLP administrator needs to fine tune the throttling options
D) the Directory Group Matching (DGM) profile has users in different groups