1. Yes—trusted IP addresses are meant for bypassing multi-factor authentication (MFA) for certain IPs. This way, you can disable MFA for users who log in from the company intranet, for instance.
2. No—you can use conditional access policies to enable MFA for users and applications.
3. Yes—fraud alerts can only be enabled for MFA Server deployments.