Two Windows Server 2022 Hyper-V hosts, HV-Primary and HV-Replica, are in the same Active Directory domain over a WAN link. You must configure Hyper-V Replica without deploying certificates, and support planned failover from HV-Primary to HV-Replica. What should you do? (Choose two)

Kerberos authentication is required for Hyper-V Replica when certificates are not used, and it operates over HTTP (port 80). Enabling the Replica server on HV-Replica and selecting Kerberos (HTTP) allows HV-Primary to send replication data. Constrained delegation is necessary for Kerberos authentication to function correctly across a WAN or when the Hyper-V hosts are in different domains or subnets, allowing the Hyper-V Replica Service on HV-Primary to delegate credentials to HV-Replica for replication. Certificate-based HTTPS (port 443) is incorrect because the requirement states "without deploying certificates." Opening TCP 443 and enabling the HTTP Listener is incorrect as Kerberos uses HTTP (port 80), not HTTPS (port 443). Performing an unplanned failover test is a post-configuration step, not a configuration step for setting up replication.