A security analyst at Contoso reviews Defender Vulnerability Management and finds a security recommendation flagging an outdated version of a line-of-business application on 40 servers. The vendor has confirmed the vulnerability does not apply because the affected component is not installed in Contoso's deployment, but the recommendation keeps lowering the exposure score. The analyst wants to stop this recommendation from affecting the exposure score for these devices while documenting the business reason, without removing the recommendation permanently. What should the analyst do?