Which detection policy gets triggered if the same user credentials is used for login from two geographically far away locations within a short span of time?

Answer options:

A.Impossible distance
B.Impossible twins
C.Impossible travel
D.Impossible logon

Correct Answer: C Option C is correct. The impossible travel policy is triggered when two user activities originate from geographically distant locations within a time period shorter than the time it would have taken the user to travel from the first location to the second.
Option A, B, D are incorrect as they are not the correct detection policy.
Reference:

https://docs.microsoft.com/en-us/cloud-app-security/anomaly-detection-policy