What should you do?

You have a Microsoft 365 subscription.

You need to be notified if users receive email containing a file that has a virus.

What should you do?
A . From the Exchange admin center, create an in-place eDiscovery & hold.
B. From the Security & Compliance admin center, create a data governance event.
C. From the Exchange admin center, create an anti-malware policy.
D. From the Security & Compliance admin center, create a safe attachments policy.

Answer: C

Explanation:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-attachments-policies