StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 350 of 498 · medium

A user group must block a web category but allow one approved domain in that category. Which policy design should the architect evaluate?

Choose the single best answer.

  1. A.Put the domain in a private app definition without an Internet Access exception
  2. B.An ordered security profile with a higher-priority domain exception and a lower-priority category rule
  3. C.One undifferentiated block rule with no exception handling
  4. D.Place the category block before the domain allow policy in the same profile
Show the answer and explanation

✓ Correct answer

  • An ordered security profile with a higher-priority domain exception and a lower-priority category rule

Place the specific domain allow at a higher priority than the broad category block. An undifferentiated block omits the exception, and placing the category block first can prevent the domain exception from being reached. A private app definition does not configure the public web filtering exception.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.