You have two servers named Server1 and Server2 that run Windows Server and have the Hyper-V role installed. You plan to deploy Hyper-V Replica between Server1 and Server2. The deployment will use certificate-based authentication. You need to configure the prerequisites for the Hyper-V Replica deployment.
Which two actions should you perform on each server? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.

Your network contains an Active Directory Domain Service (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.
You connect a Microsoft Defender or identity instances to the domain.
You need to onboard all the domain controllers to Defender for identity.
What should you run the domain controllers?

You need to meet technical requirements for Share1.
What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a domain controller named DC!
The domain uses Microsoft Entra Connect sync with a Microsoft Entra tenant and uses Microsoft Entra Password Protection to enforce a custom banned password list You deploy a new domain controller named DC2 to the domain.
You discover that the custom banned password list is applied inconsistently and often allows banned passwords to be used.
You need to ensure that the custom banned password list is always enforced.
What should you do on DC2?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The subscription contains the storage accounts shown in the following table.

You plan to enable boot diagnostics for VM1.
You need to configure storage for the boot diagnostics logs and snapshots.
Which storage account should you use?