Before enabling Ransomware Protection, what should the EPM Administrator do first?

Enable the Privilege Management Inbox in Elevate mode.

Enable the Control Applications Downloaded From The Internet feature in Restrict mode.

Review the Authorized Applications (Ransomware Protection) group and update if necessary.

Enable Threat Protection and Threat Intelligence modules.