A security analyst conducts a manual scan on a known hardened host that identifies many non- compliant items. Which of the following BEST describe why this has occurred? (Select TWO)

Using privileged credentials actually improves scan accuracy by allowing deeper access to the host, and would more likely reduce false positives rather than generate excessive non-compliant findings.

Selecting non-applicable plugins in the scan policy causes the scanner to check for vulnerabilities or configurations that do not apply to the target OS or application, generating false non-compliance findings that misrepresent the host's actual security posture.

Audit files define the specific compliance benchmarks (e.g., CIS, STIG) checked against the host; using an incorrect audit file - such as applying a Windows benchmark to a Linux host - will produce numerous spurious non-compliant results because the checks do not match the target system's configuration.

While false positives can occur in scan results, this choice describes a symptom rather than a root cause explaining why a hardened host shows many non-compliant items.

A compromised host is possible but is not the best explanation for many non-compliant findings on a known hardened host, as the scenario points to a scanning configuration issue rather than an active breach.