Microsoft Purview Data Loss Prevention (DLP) is the correct option.

DLP enforces policies that detect sensitive information and then block or restrict sharing and movement of that content across productivity apps and supported cloud services.

DLP can inspect files, emails, chats, and cloud storage and apply actions such as blocking, encrypting, or alerting to prevent unauthorized exfiltration of confidential information.

Microsoft Purview Content Explorer is incorrect because Content Explorer is intended for searching and exploring content across your estate and it does not by itself enforce prevention policies to stop sharing or movement.

Microsoft Purview Activity Explorer is incorrect because Activity Explorer focuses on viewing user and admin activity and investigation data and it does not provide the policy enforcement needed to block or control data movement.

Microsoft Purview Data Classification is incorrect because classification helps identify and label sensitive data for visibility and downstream controls but it does not by itself enforce blocking or restrictions across apps and cloud services the way a DLP solution does.

Full AWS Practitioner Certification Question