What should you include in the identity management strategy to support the planned changes to the environment?

Deploying domain controllers for corp.fabrikam.com to virtual networks in Azure extends the existing on-premises Active Directory to Azure, allowing Azure-based resources to authenticate against the same corporate directory. This is crucial for seamless integration and managing user identities across hybrid environments. Moving all domain controllers to Azure would disrupt on-premises operations and is not a hybrid strategy. Deploying a new Azure AD tenant for R&D projects would create a separate identity store, complicating management and potentially requiring synchronization, which is less efficient than extending the existing AD. Deploying domain controllers for rd.fabrikam.com is incorrect because the question implies the R&D projects will be part of the existing corp.fabrikam.com domain structure, not a separate forest.