This is a dedicated watch page for a single video.
A security administrator receives an alert in Microsoft Defender for Cloud Apps indicating that a user has accessed sensitive data from an unusual location. The alert is classified as high severity. Which of the following actions should the administrator take FIRST to effectively respond to this alert?