Which Response Rules can be used with Data-at-Rest versus Data-in-Motion?