Deallocated lock-lab VMs and a Databricks workspace flood Secure Score with recommendations that do not apply. What should the engineer do instead of treating Secure Score as broken?
Select an answer to reveal the explanation.
Short Explanation
Score is not broken—those idle VMs and Databricks boxes just do not fit the rule. Exempt the recommendation with a written why, or filter the scope, and stop pretending the meter is lying.
Full Explanation
Defender for Cloud supports recommendation exemptions and scope filters when a control is not applicable, with justification for audit. Disabling Defender for Cloud removes posture visibility. Routing posture items as Sentinel incidents confuses recommendation remediation with threat detection. Deleting resources solely to clear recommendations is not a governance-safe approach.