- Answer: D
AIP policies can be configured to empower end users to protect their own content or adjust any automatically applied protection. This includes the option of requiring justification for adjustments that are made to classification labels.
More information: https://docs.microsoft.com/en-us/azure/information-protection/configure-policy.
- Answer: B
WIP policies provide you with a number of features, such as managing only company assets on a personal device, remote-wiping company data, and encrypting downloaded data so that, when an employee is terminated, their key is invalid and they can't access content that's been encrypted with it.
More information: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/overview-create-wip-policy.