How should a DLP administrator change a policy so that it retains the original file...

Add a “Limit Incident Data Retention” response rule with “retain Original Message” option selected.

Modify the agent config.db to include the file

Modify the “Endpoint_Retain_Files.int” setting in the Endpoint server configuration

Modify the agent configuration and select the option “retain Original Files”