An administrator needs to SSL inspect all traffic but one specific URL category.

When creating SSL inspection policies, the exception policy for the specific URL category must appear first in the policy list, followed by the more generic "inspect all" policy further down. Zscaler evaluates policies in order, so placing the exception first ensures that traffic matching that category bypasses inspection before the generic policy is applied.

The study guide emphasizes the importance of policy order to ensure correct application of exceptions and general rules.