The correct option is Data retention and storage.

Data retention and storage is the stage where data is kept long term and where persistent controls are applied to preserve integrity and to prevent unauthorized access. At this stage organizations implement encryption at rest, strict access control policies, key management, immutable backups, integrity checks such as checksums or digital signatures, and monitoring and logging that detect and block unauthorized attempts. Physical and environmental protections for storage media also protect integrity and prevent unauthorized access to the underlying hardware.

Data access and use is not the best single choice because it focuses on how authorized users interact with data and on enforcing access decisions in real time. That stage is important for preventing misuse while data is being used, but it does not cover the persistent protections that protect stored copies and long term integrity.

Data generation and collection is not the best answer because it addresses how data is created and captured and it is primarily concerned with correctness and initial classification. Secure collection is important but it does not by itself provide the ongoing controls needed to stop unauthorized access over the data lifecycle.

Data destruction and disposal is not the correct stage because it occurs at the end of the lifecycle and is focused on removing data safely. Proper destruction prevents later unauthorized recovery but it does not address the continuous integrity protections and access controls required while data is retained and used.

Full AWS Practitioner Certification Question