You are the system administrator for a company. All devices run Windows 10 Enterprise. You have an on- premises Active Directory Domain Services (AD DS) domain as well as a Microsoft Azure Active Directory (Azure AD) environment.
Your on-premises Active Directory infrastructure consists of the following:
Windows Server 2012 R2 domain controllers

Windows Server 2012 domain/forest functional level

Windows Server 2012 Certificate Authority

You are planning a hybrid deployment of Windows Hello for Business.
You need to determine which deployment options are available for your environment.
Which two deployment options can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Correct Answer: B,C
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-key- trust-prereqs
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cert- trust-prereqs
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-planning- guide