Your organization wants to reduce multifactor authentication (MFA) prompts for employees when they sign in from the corporate office public IP ranges, while still requiring MFA everywhere else. As the Entra ID administrator, what should you configure first so a Conditional Access policy can reference the office network?