Merge pull request #236912 from AlizaBernstein/Patch-Update-defender-for-containers-vulnerability-assessment-azure

Patch-Update defender-for-containers-vulnerability-assessment-azure.md

Author: prmerger-automator[bot]

articles/defender-for-cloud/defender-for-containers-vulnerability-assessment-azure.md

@@ -3,7 +3,7 @@ title: Identify vulnerabilities in Azure Container Registry with Microsoft Defen
 description: Learn how to use Defender for Containers to scan images in your Azure Container Registry to find vulnerabilities.
 author: bmansheim
 ms.author: benmansheim
-ms.date: 01/11/2023
+ms.date: 05/09/2023
 ms.topic: how-to
 ms.custom: ignite-2022
 ---
@@ -30,8 +30,7 @@ The triggers for an image scan are:
 
   - Continuous scan for running images. This scan is performed every seven days for as long as the image runs. This mode runs instead of  the above mode when the Defender profile, or extension is running on the cluster.
 
-When a scan is triggered, findings are available as Defender for Cloud recommendations from 2 minutes up to 15 minutes after the scan is complete.
-
+Once a scan is triggered, scan results will typically appear in the Defender for Cloud recommendations after a few minutes, but in some cases it may take up to an hour.
 ## Prerequisites
 
 Before you can scan your ACR images:
@@ -145,8 +144,8 @@ To create a rule:
 
 1. To view, override, or delete a rule:
     1. Select **Disable rule**.
-    1. From the scope list, subscriptions with active rules show as **Rule applied**.
-        :::image type="content" source="./media/remediate-vulnerability-findings-vm/modify-rule.png" alt-text="Modify or delete an existing rule.":::
+    1. From the scope list, subscriptions with active rules appear as **Rule applied**.
+        :::image type="content" source="./media/remediate-vulnerability-findings-vm/modify-rule.png" alt-text="Screenshot showing the scope list.":::
     1. To view or delete the rule, select the ellipsis menu ("...").
 
 ## View vulnerabilities for images running on your AKS clusters 
@@ -166,6 +165,11 @@ Defender for Containers pulls the image from the registry and runs it in an isol
 
 Defender for Cloud filters and classifies findings from the scanner. When an image is healthy, Defender for Cloud marks it as such. Defender for Cloud generates security recommendations only for images that have issues to be resolved. By only notifying you when there are problems, Defender for Cloud reduces the potential for unwanted informational alerts.
 
+### What is the difference between Not Applicable Resources and Unverified Resources?
+
+- **Not applicable resources** are resources for which the recommendation can't give a definitive answer. The not applicable tab includes reasons for each resource that could not be assessed. 
+- **Unverified resources** are resources that have been scheduled to be assessed, but have not been assessed yet.
+
 ### Does Microsoft share any information with Qualys in order to perform image scans?
 
 No, the Qualys scanner is hosted by Microsoft, and no customer data is shared with Qualys.