Answer: Helps you monitor users in your on-premises environment and their behavior.
In the answer you state “on-premises”. You talk about it in the corresponding course chapter too. However, the MS documentation says: “Detect and investigate advanced attacks on premises and in the cloud”. I would mention that ATP can be used in both environments.
That is a great pick-up. Thanks a lot. We will modify the answer and get a fix published.