When editing an Exceptions (sometimes called exclusions) policy in a Symantec Endpoint Protection Manager (SEPM) some of the exception types are missing. You may only see an Application Control scan exclusion type for Folder based exceptions.
Endpoint Protection Manager
SEPM is enrolled in the cloud (SES) and configured in a Hybrid setup.
If the SEPM is in Hybrid mode, this is expected. After enrolling a SEPM in the SES cloud console (ICDm), most exceptions are managed by the cloud policies Allow List or Deny List.
For more details visit the TechDoc article below.