Moved the tip to a bullet

Author: memildin

articles/security-center/monitor-container-security.md

@@ -6,7 +6,7 @@ author: memildin
 manager: rkarlin
 ms.service: security-center
 ms.topic: conceptual
-ms.date: 02/11/2020
+ms.date: 02/12/2020
 ms.author: memildin
 ---
 
@@ -20,8 +20,10 @@ Azure Security Center covers the following three aspects of container security:
 - **Vulnerability management** - If you're on Security Center's standard pricing tier (see [pricing](/azure/security-center/security-center-pricing)), you can scan your ARM-based Azure Container Registry every time a new image is pushed. The scanner (powered by Qualys) presents findings as Security Center recommendations.
     For detailed instructions, see [Scanning your container registries for vulnerabilities](#scanning-your-arm-based-container-registries-for-vulnerabilities) below.
 
-- **Hardening of the container's environment (Kubernetes clusters and Docker machines)** - Security Center finds unmanaged containers hosted on IaaS Linux VMs or other Linux machines running Docker, and continuously compares the containers' configurations with the Center for Internet Security (CIS) Docker Benchmark. Security Center alerts you if your containers don't satisfy any of the controls. Continuous monitoring for security risks due to misconfigurations is a crucial component of any security program. 
-    For detailed instructions, see [Hardening your containers' hosts](#hardening-your-containers-hosts) below.
+- **Hardening your containers' Docker hosts** - Security Center finds unmanaged containers hosted on IaaS Linux VMs or other Linux machines running Docker, and continuously compares the containers' configurations with the Center for Internet Security (CIS) Docker Benchmark. Security Center alerts you if your containers don't satisfy any of the controls. Continuous monitoring for security risks due to misconfigurations is a crucial component of any security program. 
+    For detailed instructions, see [Hardening your containers' Docker hosts](#hardening-your-containers-docker-hosts) below.
+
+- **Hardening your Azure Kubernetes Service clusters** - Security Center provides recommendations when it finds vulnerabilities in the configuration of your Azure Kubernetes Service clusters. For details of the specific recommendations that may appear, see the [Kubernetes Service recommendations](recommendations-reference.md#recs-containers).
 
 - **Runtime protection** - If you're on Security Center's standard pricing tier, you'll get real-time threat detection for your containerized environments. Security Center generates alerts for suspicious activities at the host and AKS cluster level. For details of the relevant security alerts that might appear, see the [Alerts for Azure Kubernetes Service clusters](alerts-reference.md#alerts-akscluster) and [Alerts for containers - host level](alerts-reference.md#alerts-containerhost) sections of the alerts reference table.
 
@@ -96,8 +98,6 @@ Azure Security Center covers the following three aspects of container security:
 
 ## Hardening your containers' Docker hosts
 
->[!TIP] To harden your Azure Kubernetes Service clusters, check the **Recommendations** page for any of the [Kubernetes Service recommendations](recommendations-reference.md#recs-containers).
-
 Security Center constantly monitors the configuration of your Docker hosts, and generates security recommendations that reflect industry standards.
 
 To view Azure Security Center's security recommendations for your containers' Docker hosts: