Explanation:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies

Explanation:
Box 1: No
It will be retained for seven years.
Both Policy1 and Policy2 apply.
If there is a conflict in how long to retain the same content, it is retained in the secured location for the longest retention period.
Note: If you configure a Teams retention policy to retain chats or channel messages, users Box 2: No User2 creates the message in chat. Policy2 applies. The message will be retained for 5 years.
Box 3: Yes
After a retention policy is configured for chat and channel messages, a timer job from the Exchange service periodically evaluates items in the hidden mailbox folder where these Teams messages are stored. The timer job typically takes 1-7 days to run. When these items have expired their retention period, they are moved to the SubstrateHolds folder-another hidden folder that's in every user or group mailbox to store "soft-deleted" items before they're permanently deleted.
Messages remain in the SubstrateHolds folder for at least 1 day, and then if they're eligible for deletion, the timer job permanently deletes them the next time it runs.
Reference:
https://docs.microsoft.com/en-us/microsoftteams/retention-policies
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-teams

Explanation:
Box 1: Microsoft Purview portal
Create insider risk management notice templates
To create a new insider risk management notice template, you'll use the notice creation tool in Insider risk management solution in the Microsoft Purview portal.
Box 2: HTML
HTML for notices
If you'd like to create more than a simple text-based email message for notifications, you can create a more detailed message by using HTML in the message body field of a notice template.
Reference:
https://learn.microsoft.com/en-us/purview/insider-risk-management-notices

Explanation:
Box 1: No
File1 has two IP addresses in it.
Both Tip2 and Tip3 rules matches. Tip2 has higher priority.
Note: For the hosted service workloads, like Exchange Online, SharePoint Online and OneDrive for Business, each rule is assigned a priority in the order in which it's created. That means, the rule created first has first priority, the rule created second has second priority, and so on.
When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced.
Box 2: Yes
File2 has six IP addresses in it.
Only Rule3 matches.
Box 3: Yes
File3 has four IP addresses in it.
Both Rule2 and Rule3 matches.
Rule2 has higher priority.
Reference:
https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference