The correct option is A retention rule created in the Microsoft Purview compliance portal.

The retention rule in Microsoft Purview is the proper choice because it can preserve email and documents across Microsoft 365 workloads for a defined period and it supports long term retention and holds for legal or regulatory requirements. You can configure it to preserve content for nine years and it applies broadly to mailboxes and content locations so that the required personal data remains intact and discoverable.

A data loss prevention policy in the Exchange admin center is incorrect because DLP policies focus on detecting and preventing sensitive data leakage and they do not enforce long term preservation of items for regulatory retention periods.

A retention policy configured in the Exchange admin center is incorrect in this context because Exchange admin center retention settings are not the centralized, cross‑workload retention mechanism that Microsoft Purview provides and modern compliance scenarios and exams expect retention to be managed from Purview for organization wide requirements.

A data loss prevention policy in the Microsoft Purview compliance portal is incorrect because DLP in Purview is likewise intended to prevent and monitor data loss and to enforce protection actions, but it does not implement long term retention rules or legal holds that preserve content for a specified retention period.

Full AWS Practitioner Certification Question