Question
Your company has an Azure DevOps environment that can only be accessed by Azure Active Directory users.
You are instructed to make sure that the Azure DevOps environment can only be accessed from devices connected to the company's on-premises network.
Which of the following actions should you take?
- A. Assign the devices to a security group.
- B. Create a GPO.
- C. Configure Security in Project Settings from Azure DevOps.
- D. Configure conditional access in Azure Active Directory. Correct
Explanation
Azure DevOps sign-in for Microsoft Entra users is governed by Microsoft Entra Conditional Access, and a Conditional Access policy with an IP (named location) condition can restrict access to the corporate network range. Security settings in Project Settings control permissions, not network location. A GPO or a device security group alone does not stop access to a cloud service from outside the network.
