Which option is best to deal with policy violations?
Reactive - allow the violation, detect it and then respond
Proactive - prevent or block the violation before it occurs and then respond