A vulnerability scan identifies a critical guest package issue. What should remediation include?

1. Increase resource quotas until the finding disappears.
2. Assume only Oracle's physical security team can change guest packages.
3. Delete the scan result while leaving the package unchanged.
4. Validate exposure, prioritize risk, and patch or mitigate through the workload's controlled process.