Your network contains an on-premises Active Directory forest.

You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Az-ure AD Connect.

You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

What should you include in the recommendation?

A. Azure AD access reviews

B. Tenant Restrictions
C. Azure AD Identity Protection
D. conditional access policies

References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview