You plan to deploy Windows 11 session hosts that will be domain-joined to an on-premises Active Directory forest and hybrid Microsoft Entra joined. Which two prerequisites must you configure before deploying the host pool? (Each correct answer presents part of the solution. Choose two answers.)

To achieve Hybrid Microsoft Entra joined Windows 11 session hosts, you must first add and verify your on-premises UPN suffix (e.g., contoso.com) as a custom domain in Microsoft Entra ID. This ensures that user accounts synchronized from on-premises Active Directory can be properly associated with your Microsoft Entra tenant. Second, you need to configure Azure AD Connect to enable Hybrid Azure AD join for Windows 10 or later devices. This setting in Azure AD Connect synchronizes device objects from on-premises AD to Microsoft Entra ID, allowing the session hosts to register as hybrid joined. Deploying AD FS is unnecessary as password hash synchronization or pass-through authentication can be used. Azure AD Connect Cloud Sync does not support Hybrid Azure AD join for devices. Device writeback is for scenarios like conditional access and is not a prerequisite for Hybrid Azure AD join itself.