Proseware Legal keeps client records for seven years, uses Microsoft Purview, and must prove that privileged access is reviewed quarterly. The legal department needs records to be declared, protected from deletion, and managed through disposition review. Which SC-900 concept or Microsoft capability best fits this requirement?