Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.
Which settings should you configure?
A. Locations
B. Device platforms
C. Sign-in risk
D. Device state
