What are two considerations for this configuration?

An administrator at Universal Containers has been asked to prevent users from accessing Salesforce from outside of their network.

What are two considerations for this configuration? Choose 2 answers
A . Single sign-on will allow users to Jog In from anywhere.
B . Users can change their password to avoid login IP restrictions.
C . Enforce Login IP Ranges on Every Request must be selected to enforce IP restrictions.
D . IP address restrictions are set on the profile or globally for the org.

Answer: C,D