An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?

`default-action drop` is an action applied to traffic that does not match any explicit sequence, not the command to specify which traffic to capture.

The `action` command defines what operations (e.g., accept, drop, redirect) to perform on traffic that has already been matched, but it does not specify the matching criteria itself.

`default-action accept` is an action applied to traffic that does not match any explicit sequence, not the command to specify which traffic to capture.

The `match` command within a data policy sequence is used to define the criteria, such as source IP or destination port, that packets must meet to be processed by that specific sequence, effectively 'capturing' them for policy application.