Which two options should you select?

Your on-premises network contains an Active Directory domain.

You have a Microsoft 365 E5 subscription.

You plan to implement a hybrid configuration that has the following requirements:

• Minimizes the number of times users are prompted for credentials when they access Microsoft 365 resources

• Supports the use of Azure Active Directory (Azure AD) Identity Protection

You need to configure Azure AD Connect to support the planned implementation.

Which two options should you select? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Enable single sign-on
B. Pass-through authentication
C. Password writeback
D. Directory extensions attribute sync