Learn more about how this vulnerability scan works
The scan only checks 10-15 specific settings. No more than that. These are undisputable security issues, such as supporting SSLv2, using software that is End of Life, having a blacklist registration for malware distribution, etc.
These so-called 'security no-brainers' are discussed in the technical blogs, including research results.