A company wants to state that customer data must not be emailed externally unless a manager approves the exception. Which document type should contain this rule?

Guideline, because it gives staff flexible suggestions about email use

Guidelines are optional recommendations, so they are too weak for a mandatory restriction on customer data.

Procedure, because it lists the exact button clicks for sending email

Procedures describe how to perform a task, but the scenario is about the rule itself, not the step-by-step workflow.

Standard, because it provides a general recommendation for communication

Standards define required specifics, but this scenario is about a governing rule and exception requirement, which belongs in policy.

What does this SY0-701 question test?

Standard ACLs match source addresses.

What is the correct answer to this question?

The correct answer is: Policy, because it establishes mandatory organizational rules — A policy is the best document for this rule because it sets the mandatory expectation for handling customer data. Policies establish what is allowed, prohibited, or required across the organization. In this case, the organization wants a clear rule that external email of customer data is not permitted unless an approved exception exists, which is exactly the kind of high-level direction a policy provides. Why others are wrong: Guidelines are optional and would not enforce the rule. Procedures would be helpful later if staff needed exact steps for requesting approval, but they are not the place for the governing requirement itself. Standards define specific technical or operational requirements, but the scenario is asking for the policy-level rule and exception condition.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.