An unauthenticated scan reports few findings, but administrators need deeper evidence of missing local patches. What improves coverage?

1. An authorized credentialed scan with suitable least-privilege access
2. Suppress all informational results before any scan runs
3. Disable every scan plugin
4. Run the same unauthenticated scan from a different desktop only