Your Azure DevOps environment is restricted to users in Azure AD. To ensure only devices connected to the on-premises network can access Azure DevOps, what should you configure?

Configuring conditional access in Azure AD is the correct solution because it allows you to enforce access policies based on various conditions, including network location. You can create a policy that requires users to be on a specific IP range (representing your on-premises network) to access Azure DevOps. Assigning the Stakeholder access level to all users is incorrect because it only limits features within Azure DevOps and does not restrict access based on network location. Configuring Security in Project Settings in Azure DevOps is incorrect as these settings primarily control permissions within projects and teams, not network-based access restrictions. Configuring risky sign-ins in Azure AD is incorrect because this feature is designed to detect and respond to unusual or suspicious sign-in attempts, not to enforce network-based access policies.