Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains the objects shown in the following table.
You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies What should you do?
A. Change the scope of Group2 to Universal
B. Clear the Configure device writeback option.
C. Change the scope o’ Group1 and Group2 to Global
D. Select the Configure Hybrid Azure AD join option.
