Box 1: Yes -
Box 2: No -
Use of Microsoft Authenticator is not required. Either a text or phone call is required for MFA.
Note: Microsoft Authenticator is a multifactor app for mobile devices that generates time-based codes used during the Two-Step Verification process.
Box 3: No -
The New York IP address subnet is included in the "skip multi-factor authentication for request.
Reference:
https://www.cayosoft.com/difference-enabling-enforcing-mfa/