The correct option is Create one 6 year organization retention policy for all executive mailboxes and apply an 8 year retention label specifically to the CEO mailbox.

This approach gives a single baseline retention that covers all executive mailboxes and then uses a retention label to extend retention only for the CEO. Organization level retention policies are simple to manage and they provide the default 6 year retention with minimal administrative overhead. A retention label can be applied to the CEO mailbox or to items in that mailbox to ensure an 8 year retention period without creating additional tenant wide policies.

Place the CEO mailbox on litigation hold and rely on the standard retention configuration for the other executive mailboxes is incorrect because litigation hold preserves content until the hold is removed and it is intended for legal preservation rather than enforcing a fixed compliance retention period. Using litigation hold would overpreserve and add administrative complexity for a simple time bound requirement.

Create two distinct retention policies with one set to 8 years targeting the CEO mailbox and another set to 6 years targeting the other executive mailboxes is incorrect because it meets the requirement but increases policy count and ongoing management. The question asks for minimal administrative work and using labels for exceptions is a cleaner way to keep policy count low.

Apply a single 8 year retention policy to all executive mailboxes and then create 6 year retention labels for the remaining executives is incorrect because you cannot use a label to shorten retention below a longer applied policy. A tenant or mailbox level policy that enforces 8 years would prevent a 6 year label from reducing that retention, so this would not meet the requirement for the non CEO executives.

Full AWS Practitioner Certification Question