Question: What does Advanced Threat Protection do?

Answer: Helps you monitor users in your on-premises environment and their behavior.

In the answer you state “on-premises”. You talk about it in the corresponding course chapter too. However, the MS documentation says: “Detect and investigate advanced attacks on premises and in the cloud”. I would mention that ATP can be used in both environments.