hardMultiple ChoiceObjective-mapped
200-901 Practice Question: Refer to the exhibit
Exhibit
{
"network": {"id": "N_12345", "name": "Office"},
"vlan": {"id": "1", "subnet": "192.168.1.0/24"},
"groupPolicy": {"name": "Block Social Media", "contentFiltering": {"blockedUrlPatterns": {"id": "456"}}}
}Refer to the exhibit. A Meraki network has a group policy 'Block Social Media' that references a content filtering rule. The policy is applied to VLAN 1. Users in that VLAN cannot access instagram.com but can access facebook.com. What is the most likely reason?
⚠ Common exam trap
Cisco often tests the distinction between a policy being applied (which is true here) and the rule's scope being incomplete, tempting candidates to blame the policy application or appliance configuration rather than the rule's content.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The blocked URL patterns list does not include all social media sites.
The group policy 'Block Social Media' references a content filtering rule that likely uses a predefined or custom URL category list. If the rule blocks only specific URL patterns (e.g., 'instagram.com') but does not include all social media sites (e.g., 'facebook.com'), then users can still access unblocked sites. Meraki content filtering operates on URL category matching or explicit URL pattern lists; if the list is incomplete, the policy will not block all intended sites.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The content filtering rule blocks only a specific set of URLs, but not all social media sites.
Why it's wrong here
This statement is true, but the more precise cause is that the blocked list does not include facebook.com.
- ✗
The group policy is not applied to the VLAN.
Why it's wrong here
The exhibit shows the policy is applied to VLAN 1.
- ✓
The blocked URL patterns list does not include all social media sites.
Why this is correct
The blocked list likely contains patterns for instagram but not facebook, so users can access facebook.
- ✗
The content filtering is not enabled on the MX appliance.
Why it's wrong here
The group policy includes content filtering, so it is enabled.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 989 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.