You are an IT administrator in a hybrid environment consisting of Windows 10 devices. Most of your users have migrated their mailboxes to Exchange online, but Sales and Marketing still have their mailboxes on premise. All users are assigned Microsoft 365 Enterprise E5 licenses. You wish to take advantage of the security capabilities in Microsoft Defender Advanced Threat Protection, and plan to run the Microsoft Office 365 Attack simulator on users in the Marketing-department. You have enabled MFA for all users. What must you do?

Answer options:

A.Migrate the Marketing group members to Exchange Online.
B.Set AD Connect in staging mode.
C.Create a mail-enabled security-group and add the Marketing group members.
D.Configure the on-premise public IP in the MFA "trusted IP" settings

Correct Answer: A 
Attack Simulator only works on cloud-based mailboxes. 

Since the answer is clearly stated in the documentation, all other options are incorrect. 
Reference: 
To know more about Microsoft Office 365 Attack Simulator, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator?view=o365-worldwide