To enforce Multi-Factor Authentication (MFA) for remote users, Microsoft recommends using Conditional Access policies that distinguish between trusted (corporate) and untrusted (remote) network locations.
In Azure AD Conditional Access, this is implemented using Named Locations . You define a named location by specifying trusted IP address ranges for your corporate network. The policy can then enforce MFA for sign- ins that originate outside those trusted locations.
Microsoft Learn states:
"Use named locations in Conditional Access to define network boundaries for your organization and configure policies to enforce MFA for users accessing from untrusted networks."
# Correct answer: C. a named location