Your organization has an on-premises Active Directory domain named fabrikam.local with three domain controllers. The company has recently subscribed to Microsoft 365 and created an Azure AD tenant named fabrikam.onmicrosoft.com. You are tasked with installing Azure AD Connect on a dedicated server and implementing seamless single sign-on. Before proceeding with the implementation, you need to prepare the environment. Which three actions should you perform first?