What license level is needed for AAD Connect with password hash sync (PHS) and password write-back?

What license level is needed for AAD Connect with password hash sync (PHS) and password write-back?
A. AAD P1
B. AAD P2
C. O365 Apps
D. AAD free