The correct answer is Threat policies.

Safe Links is a URL protection feature that is managed with other anti-phishing and threat protection controls and these controls are grouped under the threat protection section of the security console. You edit Safe Links rules from that area because it contains the Safe Links policy settings and the actions for URL scanning and rewriting.

Policies and rules is incorrect because it is a generic label and not the specific console area used to configure Safe Links. The console uses the Threat policies section to hold Safe Links policies rather than a general policies page.

Security and compliance is incorrect because it describes the broader portal and not the specific Threat policies area where Safe Links is configured. The old Security and Compliance Center experience is being replaced by newer Defender portals so this wording is less likely on newer exams.

User management is incorrect because user management controls accounts and permissions and does not include threat protection features like Safe Links. Configuring URL protection requires the Threat policies area not user account settings.

Full AWS Practitioner Certification Question