First Step to Deploy Hybrid Joined Cloud PCs
Short answer
A Create an Azure network connection (ANC) to provide the required network line of sight to on-premises domain controllers for hybrid join.
Question
Key Takeaways
Creating an Azure network connection is tested; the common trap is thinking a provisioning policy or custom image comes first, but hybrid join requires network connectivity to on-premises AD first.
Deploying Microsoft Entra hybrid joined Windows 365 Cloud PCs requires network line of sight to on-premises domain controllers. This page establishes that creating an Azure network connection (ANC) is the necessary first step to provide this connectivity.
Common mistake: Choosing to create a provisioning policy first, which fails because it requires an existing Azure network connection to specify the network for hybrid join.
Expert Analysis
Why the Answer Is Correct
To deploy Microsoft Entra hybrid joined Cloud PCs, the devices must have network line of sight to on-premises Active Directory domain controllers. Creating an Azure network connection (ANC) establishes this required connectivity to an Azure virtual network. Therefore, the ANC must be created before you can configure a provisioning policy for hybrid-joined Cloud PCs.
Why the Other Options Are Wrong
Creating a provisioning policy (Option B) depends on an existing Azure network connection to define the network for hybrid join, so it cannot be done first. Creating a configuration profile in Intune (Option C) applies settings after the device is enrolled and is not a prerequisite for deployment. Uploading a custom image (Option D) is optional and not required as the first step, since you can use a Microsoft gallery image.
Community Comment Notes
Commenters emphasized that Microsoft Entra hybrid joined devices require network line of sight to domain controllers, making the ANC a prerequisite. One noted that "Without this connection, devices become unusable," reinforcing why the network connection must be established first.
Official Reference
https://learn.microsoft.com/en-us/windows-365/enterprise/create-azure-network-connection
This link opens the official vendor documentation in a new tab.
Exam Strategy
When asked about the first step for deploying hybrid-joined Cloud PCs, always look for the option that establishes network connectivity to on-premises domain controllers. An Azure network connection (ANC) is the prerequisite that enables the provisioning policy to place the Cloud PC on the correct network.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
Darkfire 👍 4 Answered AA is correct based on: https://learn.microsoft.com/en-us/windows-365/enterprise/deployment-overview https://learn.microsoft.com/en-us/windows-365/enterprise/create-azure-network-connection
-
Soest009 👍 3"Microsoft Entra hybrid joined devices require network line of sight to your domain controllers periodically. Without this connection, devices become unusable." This is a prereq, so that must be the first thing to do https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan
-
kiro_e 👍 2"Create an Azure network connection (ANC)," is not the first step required to deploy Cloud PCs that will be Microsoft Entra hybrid joined. While network connectivity is essential for accessing Azure services, such as Microsoft Intune for device management, creating an Azure network connection is not the initial step specifically for deploying Cloud PCs with hybrid join. So the right answer could be C
-
899f1a7 👍 2 Answered Ahttps://learn.microsoft.com/en-us/windows-365/enterprise/create-azure-network-connection#:~:text=Azure%20network%20connections%20(ANC)%20let%20you%20provision%20Cloud%20PCs%20that%20are%20attached%20to%20a%20virtual%20network%20that%20you%20manage.
-
OigresMG 👍 2It seems that "A. Create an Azure network connection (ANC)" is the correct option based on:
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All MD-102 Questions
Access 92 questions with complete answers and detailed explanations.
View Full MD-102 Practice Test →