What should you do first?

You have a Microsoft 365 subscription.

All users have their email stored in Microsoft Exchange Online

In the mailbox of a user named User, you need to preserve a copy of all the email messages that contain the word ProjectX.

What should you do first?
A . From the Exchange admin center, start a mail flow message trace.
B. From the Security & Compliance admin center, start a message trace.
C. From the Security & Compliance admin center, create a label and label policy.
D. From the Exchange admin center, create a mail flow rule.

Answer: C

Explanation:

When you configure conditions for a label, you can automatically assign a label to a document or email. In this case, we would create a label to label all email messages that contain the word ProjectX. We would then create a label policy to preserve a copy of all message that have the label assigned.

Reference: https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-classification