The correct answer is Exchange mail and SharePoint sites.

Disabling Exchange mail prevents confidential files from being widely distributed by email and it stops mail based forwarding of attachments that could expose files outside user OneDrive accounts. Disabling SharePoint sites prevents site level sharing and external site access that could allow files stored in the SharePoint service to be exposed, and this helps contain exposure when you keep OneDrive storage active while applying tighter controls.

SharePoint sites and Teams is incorrect because turning off Teams alone does not stop file distribution by email and it leaves Exchange mail enabled which can still expose files from OneDrive. Teams files also rely on SharePoint so removing Teams does not address mail based sharing.

Microsoft Purview and Teams is incorrect because Microsoft Purview is a compliance platform and not typically switched off to block file exposure, and disabling Purview would remove detection and protection capabilities rather than prevent sharing. Disabling Teams does not stop Exchange mail or SharePoint site level sharing which are common paths for OneDrive file exposure.

Exchange mail and Teams is incorrect because although disabling Exchange reduces email based leaks, leaving SharePoint sites enabled still allows site level sharing and access that can expose OneDrive files. Teams alone does not replace the need to control SharePoint level sharing.

Full AWS Practitioner Certification Question