Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a domain controller named DC!

The domain uses Microsoft Entra Connect sync with a Microsoft Entra tenant and uses Microsoft Entra Password Protection to enforce a custom banned password list

You deploy a new domain controller named DC2 to the domain.

You discover that the custom banned password list is applied inconsistently and often allows banned passwords to be used.

You need to ensure that the custom banned password list is always enforced.

What should you do on DC2?

® A. Install the Microsoft Entra Password Protection DC agent.

O B. Install the Microsoft Entra provisioning agent

Q C. Install the Microsoft Entra Password Protection proxy service.

Q D. Provide access to the https://login.microsoftonline.com and https://enterpriseregistration.windows.net URLs.

O E. Install the Azure Monitor Agent