You have a hybrid deployment of Azure Active Directory (Azure AD).

You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network.

What should you include in the recommendation?

A. Azure AD roles and administrators

B. a conditional access policy

C. Azure AD Application Proxy
D. Azure AD Privileged Identity Management