The correct options are EnableSoftDelete and EnablePurgeProtection.

EnableSoftDelete turns on soft delete so that deleted keys, secrets, and certificates are retained for a configurable retention period and to meet 75 days you must also set the retention value with the SoftDeleteRetentionInDays parameter when creating the vault. EnablePurgeProtection is required together with soft delete to prevent permanent purge of deleted objects so that the items cannot be permanently removed before the retention period ends and this combination enforces the 75 day retention.

EnabledForTemplateDeployment is incorrect because it only controls whether Azure Resource Manager template deployments can access the vault during deployment and it does not affect deletion retention or purge behavior.

EnabledForDeployment is incorrect because it controls whether certain services can access the vault during resource deployment and it does not enable soft delete or block purging.

Full AWS Practitioner Certification Question