You are the Office 365 administrator for your company. The company uses Active Directory
Federation Services (AD FS) to provide single sign-on to cloud-based services. You enable multifactor authentication.

Users must NOT be required to use multi-factor authentication when they sign in from the
company’s main office location. However, users must be required to verify their identity with a
password and token when they access resources from remote locations.
You need to configure the environment.
What should you do?

A.
Disable AD FS multi-factor authentication.

B.
Configure an IP blacklist for the main office location.

C.
Disable the AD FS proxy.

D.
Configure an IP whitelist for the main office location.