A non-critical vulnerability has been identified by a Linux vendor, who has released a patch and recommends that it be applied immediately. Which of the following is the BEST plan for the cloud admini

Declaring an emergency maintenance window is disproportionate for a non-critical vulnerability and skips the required testing in lower environments before production deployment.

Deploying an untested patch to a failover cluster and forcing a failover exposes live production workloads to potential instability caused by the unvalidated patch.

Deploying to half of production servers is a partial rollout strategy that still bypasses the mandatory non-production testing phase and introduces risk to live systems.

Because the vulnerability is classified as non-critical, there is no justification for bypassing standard change management procedures. Deploying to development and QA environments first, followed by a functional test review, ensures the patch does not introduce regressions or service instability before it reaches production. This approach balances timely remediation with the stability requirements of production systems.