Recommend an authentication solution that meets the performance requirements. Which two actions should you include?

To meet performance requirements for authentication in Azure Virtual Desktop (AVD), it's crucial to minimize latency between session hosts and domain controllers. Deploying domain controllers for the on-premises Active Directory domain on Azure virtual machines in the new sites brings authentication services closer to the AVD session hosts. This reduces network hops and latency, improving logon times and overall user experience. Additionally, creating an Active Directory site in each Azure region containing AVD session hosts allows for proper site-aware authentication. This ensures that session hosts prioritize authenticating against domain controllers within their own Azure region and site, further optimizing authentication performance by preventing cross-region authentication traffic when local domain controllers are available. Incorrect options: Configuring identity for all session hosts is a general step but doesn't specifically address performance optimization for authentication. Creating an Azure AD DS managed domain is an alternative identity solution, not a way to optimize authentication for an existing on-premises Active Directory. Deploying RODCs might reduce the attack surface but doesn't offer the same write capabilities or performance benefits for all authentication scenarios as full domain controllers in this context.