A system administrator has seen repeated positive vulnerability messages only to discover that no vulnerability exists. The vulnerability messages repeat daily for several days, causing the system administrators to ignore them. What can the system administrator do to combat false positives?
1) Update the vulnerability scanning tool to reduce false positives
2) Configure the vulnerability scanning tool to exclude known false positives
3) Increase the frequency of vulnerability scans
4) Ignore the vulnerability messages and hope they go away
5) Hire additional system administrators to handle the false positives