Question 122

You have a Microsoft Entra tenant named contoso.com that syncs with an Active Directory Domain Services (AD DS) domain named corp.contoso.com The domain contains 100 devices that have the following configurations: • Hybrid joined • Enrolled in Microsoft Intune • Disabled built-in local administrator account • Contain a local user account named User1 that is a member of the local administrators group You need to recommend a solution that meets the following requirements: • Ensures that the Directory Services Restore Mode (DSRM) credentials of each domain controller are backed up to the AD DS database • Ensures that the password of User1 changes automatically every 60 days • Ensures that the credentials of User1 are stored in an encrypted store • Prevents the User1 password from being changed manually • Whenever possible, stores all credentials in contoso.com • Minimizes administrative effort What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.