You have an Azure Active Directory (Azure AD) tenant.
All administrators must enter a verification code to access the Azure portal.
You need to ensure that the administrators can access the Azure portal only from your on-premises network.
What should you configure?
A. the multi-factor authentication service settings
B. the default for all the roles in Azure AD Privileged Identity Management
C. an Azure AD Identity Protection sign-in risk policy
D. an Azure AD Identity Protection user risk policy
