DRAG DROP
Your network contains an Active Directory domain. The domain contains a server named Server1. You install Advanced Threat Analytics (ATA) on Server1. You need to configure ATA to detect suspicious activities in the domain.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer: 
Explanation:
References:
https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step1