Which layer corresponds to 'policies' in the described layer scheme?

Which layer corresponds to 'policies' in the described layer scheme?

• A. 8 - User
• B. 9 - Policies
• C. 7 - Application
• D. 6 - Presentation

Answer: (B)

Policies sit at the top as the governance layer that defines rules, standards, and enforcement across the entire stack. In a layered model, you separate how data is presented, how software functions, and how users interact, but the policies layer sets the constraints and responsibilities that guide all of those layers. This overarching role makes it the best fit because it governs behavior across presentation, application, and user interactions rather than implementing a specific function itself. For example, a policy requiring multi-factor authentication applies across the system, influencing how the application verifies identity and how data is presented and used, but the policy itself isn’t a UI or a software function. The other layers focus on how things are delivered and interacted with, while policies define the rules that everything else must follow.

Policies sit at the top as the governance layer that defines rules, standards, and enforcement across the entire stack. In a layered model, you separate how data is presented, how software functions, and how users interact, but the policies layer sets the constraints and responsibilities that guide all of those layers. This overarching role makes it the best fit because it governs behavior across presentation, application, and user interactions rather than implementing a specific function itself. For example, a policy requiring multi-factor authentication applies across the system, influencing how the application verifies identity and how data is presented and used, but the policy itself isn’t a UI or a software function. The other layers focus on how things are delivered and interacted with, while policies define the rules that everything else must follow.