Your organization uses Microsoft Defender for Cloud Apps with the Microsoft 365 app connector enabled. The security team wants to be automatically alerted whenever a single user account signs in from two geographically distant locations within a time frame that makes physical travel between them impossible, which may indicate compromised credentials. You need to implement this detection with the least administrative effort. What should you configure?