You are a security administrator for a large company that uses Microsoft Defender for Cloud Apps. You receive an alert indicating that a user has logged in from two different countries within a short time span. What type of alert is this most likely to be?