An organization's AI system processes employee performance reviews. The HR team and legal counsel require that this data be classified as 'Highly Confidential - HR' in Microsoft Purview and that any access to this data must be logged. Which combination of Microsoft Purview capabilities achieves both requirements?

The correct approach applies a 'Highly Confidential - HR' sensitivity label with encryption and access restrictions, and enables Microsoft Purview Audit (Premium) for sensitivity label and file access events. The label classifies the data and uses encryption and access restrictions to limit it to authorized HR staff and legal counsel. Microsoft Purview Audit (Premium) provides enhanced audit logging that captures sensitivity label application events, file access events for labeled content, and other compliance-relevant activities, fulfilling both requirements. The option using Audit (Standard) for label application events is incorrect because Audit (Standard) has limited audit log retention (90 days) and fewer event types than Audit (Premium); Premium is required for comprehensive access logging of labeled content. The option using a DLP policy for 'Highly Confidential - HR' content and endpoint DLP logging is incorrect because DLP policies enforce data handling rules, such as preventing sharing, but are not primarily for data classification or comprehensive access audit logging. The option using a retention label 'HR Data' and audit logging in the Microsoft 365 admin center is incorrect because retention labels manage content lifecycle, such as how long to keep it, but do not classify data by sensitivity or log access to the content.