You have an on-premises Active Directory forest and an Azure Active Directory (Azure AD) tenant. All Azure AD users are assigned a Premium P1 license.

You deploy Azure AD Connect.

Which two features are available in this environment that can reduce operational overhead for your company’s help desk? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Azure AD Privileged Identity Management policies
B. access reviews

C. self-service password reset

D. Microsoft Cloud App Security Conditional Access App Control

E. password writeback