You are reviewing the recommendation to enable Adaptive Application Control and found out that 10 machines appear under “No recommendation”. From the options below, which one better explain this behavior?

Answer options:

A.The machine has Log Analytic Agent installed
B.It`s a Windows machine with a pre-existing AppLocker policy enabled by either a GPO or a local security policy
C.The machine has an older version of Log Analytic agent
D.Log Analytics agent is sending events.

Correct Answer: B Option B is correct. VMs will only appear under No recommendation tab when:
It`s missing a Log Analytics agent
The Log Analytics agent isn`t sending events
It`s a Windows machine with a pre-existing AppLocker policy enabled by either a GPO or a local security policy
Option A,C & D are incorrect. They are not responsible for VM to appear under No recommendation tab.
Reference: 

https://docs.microsoft.com/en-us/azure/security-center/security-center-adaptive-application