The correct option is Backup.

A comprehensive Backup strategy provides separate, restorable copies of data so administrators can recover from accidental deletion, corruption, or ransomware. Backups enable point in time restores and can be stored in separate locations or systems so recovery is possible even when the primary environment is compromised.

Retention and legal hold policy preserves data for compliance and can prevent intentional deletion, but it does not create recoverable copies or provide point in time restores for operational recovery.

Cloud Storage snapshot policies suggests point in time copies for certain storage types, but snapshots are usually limited to particular resources and do not replace a full backup program that includes offsite retention and recovery planning.

Encryption at rest protects the confidentiality of stored data, but it does not prevent deletion or corruption and it does not provide a mechanism to restore lost or compromised data.

Full AWS Practitioner Certification Question