Don't forget to destroy the Vagrant box once you have finished; you don't want an idle virtual machine running on your host. To do this, run:

$ vagrant destroy

Once the box has gone, I would recommend running through the scan and remediation a few times on a clean installation to get an idea of how this can be implemented on new hosts.