A ZIA URL Filtering policy aims to meet compliance goals by blocking Social Networking for...

Answer A is correct. The global Social Networking block includes Marketing users, so an exception below that rule cannot provide the intended access after the earlier block matches. The specific exception must be placed above the broad rule and restricted to the Marketing group and approved schedule. ZIA URL Filtering rules support identity and destination criteria, actions, and rule ordering, allowing the administrator to create a narrow business exception without weakening the organization-wide compliance control. The time condition ensures that Marketing access is available only during the authorized window. Adding Sales would expand exposure without a stated requirement, while duplicating user-level rules increases complexity and can create inconsistent administration. Allow Cascading relates to interaction with Cloud App Control and does not repair an incorrectly ordered URL Filtering exception. See Zscaler’s URL Filtering policy configuration and URL Filtering overview.