An organization's AI system processes employee performance reviews. The HR team and legal counsel require that this data be classified as 'Highly Confidential - HR' in Microsoft Purview and that any access to this data must be logged. Which combination of Microsoft Purview capabilities achieves both requirements?

B is correct because applying a sensitivity label 'Highly Confidential - HR' with encryption restricts access to authorized HR staff and legal counsel. Microsoft Purview Audit (Premium) provides enhanced audit logging that captures sensitivity label application events, file access events for labeled content, and other compliance-relevant activities, fulfilling both the classification and access logging requirements. A is incorrect because Audit (Standard) has limited audit log retention (90 days) and fewer event types compared to Audit (Premium); Premium is required for comprehensive access logging of labeled content. C is incorrect because DLP policies enforce data handling rules (prevent sharing) but are not primarily for data classification or comprehensive access audit logging. D is incorrect because retention labels manage the lifecycle of content (how long to keep it) but do not classify data by sensitivity or log access to the content.