Microsoft Defender for Cloud | Environment settings - Question on Configuration

RaziEnggEY Let me add bit more details here. During the testing of few scenarios, we found that some of the configuration settings related to "DfC" has causing some level of confusion (refer the attached screen shorts). 

When configuring 'Microsoft Defender for Cloud', for the very first time in this subscription [Azure Pass - Sponsorship], we have selected selected few "Defender Plans" like Defender CSPM, Servers, Databases and Storage. After selected the Defender plans, on "settings and monitoring", we have created a 'Log Analytics Workspace', (First LAW). Here is the exact location [Microsoft Defender for Cloud-->Management-->Environment settings-->'Azure Pass - Sponsorship' Subscription -->Settings-->Defender plans-->Settings & Monitoring -->Component-->Log Analytics agent/Azure Monitor agent-->Edit Configuration-->Auto-provisioning configuration-->Custom Workspace-->FirstLAW].

Here we are under the assumption that the 'Microsoft Defender for Cloud' instance is going to utilize the FirstLAW as the preferred  'Log Analytics Workspace' for the subscription and no further configuration is required, may be other than selecting on certain specific configuration areas. However, once you back to the Microsoft Defender for Cloud-->Management-->Environment settings page, you will be able to see, FirstLAW ('Log Analytics Workspace') under the subscription name. If you select "FirstLAW"('Log Analytics Workspace'), you will be able to see more Defender plans listed under it, and it has options again to enable/select plans. 

My question here is, what exactly that second set of Defender plans listed under the "FirstLAW"('Log Analytics Workspace'), which is again showing under the same subscription ?Capture3Capture2Capture1