A scanner finds no issues on a workload that was never successfully scanned. What is the correct interpretation?

1. The workload should be exempt from all future reviews.
2. The workload is necessarily free of vulnerabilities.
3. Missing scan coverage must be investigated rather than counted as a clean result.
4. Removing the workload from inventory resolves the security risk.