You deploy Microsoft Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees. Employees must not be able to share documents or forward emails containing sensitive information outside the company. You need to enforce the file-sharing restrictions. What should you do?