The correct options are Change the organization's legal entity name, Require multifactor authentication for users, Apply a custom visual theme and logo to the tenant, and Define password expiration and rotation rules.

Change the organization's legal entity name is a tenant profile setting that administrators can edit in the organization or tenant settings. Updating the legal entity name ensures billing records and official communications reflect the correct company information.

Require multifactor authentication for users can be enforced by administrators through identity and access controls such as conditional access policies or security defaults. Requiring MFA is a common tenant level security policy to protect user accounts from compromise.

Apply a custom visual theme and logo to the tenant is a branding capability available to administrators so that sign in pages and the productivity suite interface can display corporate logos and color schemes. This helps maintain consistent company branding for users.

Define password expiration and rotation rules is an identity policy that administrators can configure to require periodic password changes and to set complexity and rotation requirements. These rules are part of the tenant level password and authentication settings.

Full AWS Practitioner Certification Question