Your on-premises network contains an Active Directory domain. You have a Microsoft 365 E5 subscription. You plan to implement a hybrid configuration that has the following requirements: - Minimizes…

Password Hash Synchronization (PHS) is required for Azure AD Identity Protection to analyze compromised credentials and perform risk assessments, directly addressing the Identity Protection requirement.

Password writeback allows password changes in Azure AD to be synchronized back to on-premises AD, which is unrelated to minimizing sign-in prompts or enabling Identity Protection.

Directory extension attribute sync extends the schema to synchronize custom attributes, which is not relevant to authentication methods, single sign-on, or Identity Protection.

Enabling single sign-on refers to Azure AD Seamless Single Sign-On, which works with Password Hash Synchronization to automatically sign in users on corporate-network-joined devices, thereby minimizing credential prompts.

Pass-through authentication is an alternative authentication method to PHS; while it also supports Identity Protection and SSO, the question asks for two options to configure Azure AD Connect, and PHS combined with 'Enable single sign-on' (Seamless SSO) is a valid and commonly used solution.