You are the Microsoft 365 administrator for a company. The company needs to ensure that certain documents are marked as confidential and restricts employees from sharing those documents outside of the organization. Which two solutions should you use to achieve this goal? Each correct answer presents a complete solution.