Update understanding-billable-assets.md

host / ip combinations more clearly defined

Author: danielledennis

articles/external-attack-surface-management/understanding-billable-assets.md

@@ -18,7 +18,7 @@ When customers create their first Microsoft Defender External Attack Surface Man
 
 The following kinds of assets are considered billable:  
 
-- Approved hosts 
+- Approved hosts paired to any IP address(es) 
 - Approved domains 
 - Approved IP addresses 
 
@@ -33,9 +33,9 @@ This section describes the conditions that the three asset types listed above mu
 
 
 
-### Approved hosts 
+### Approved host/IP combinations
 
-Hosts are considered billable if the Defender EASM system has observed resolutions within the last 30 days. All host-IP combinations from Approved Inventory will be identified as potential billable assets. All hosts in the Approved Inventory state are considered billable, regardless of the state of the coinciding IP address.    
+Hosts are considered billable if the Defender EASM system has observed resolutions within the last 30 days. If the host is in the Approved Inventory state, the host/IP combination will be identified as a billable asset. All hosts in the Approved Inventory state are considered billable, regardless of the state of the coinciding IP address. The IP address does not need to be in the Approved Inventory state for the host/IP combination to be included in your billable asset count. 
 
 
 For example: if www.contoso.com has resolved to 1.2.3.4 and 5.6.7.8 in the past 30 days, both combinations will be added to the host count list: