Exam MS-100 topic 1 question 1 discussion

After your company migrates their on-premises email solution to Microsoft Exchange Online, you are tasked with assessing which licenses to acquire.
You are informed that licenses acquired for the company's IT and Managers groups should allow for the following:
✑ The IT group needs to have access to the Microsoft Azure Active Directory (Azure AD) Privileged Identity Management.
✑ Both the IT and Managers groups should have access to Microsoft Azure Active Directory (Azure AD) conditional access.
You need to make sure that the licensing costs are kept to a minimum.
Which two of the following options should you recommend? (Choose two.)