Since the hypervisors were upgraded to the latest version, each new deployment results in an error being displayed at the orchestrator. To troubleshoot the issue, which of the following should be done

A locked domain account would cause authentication failures, but the symptom is a deployment error at the orchestrator following a hypervisor version change, making a compatibility issue far more probable.

Upgrading the orchestrator before confirming whether an upgrade is required or supported could introduce additional instability without evidence that version mismatch is the confirmed root cause.

The compatibility matrix documents which versions of the orchestrator, hypervisor, and guest VMs are validated to work together. Confirming the matrix first identifies whether the hypervisor upgrade introduced a version incompatibility with the orchestrator, which is the most direct and non-destructive diagnostic step before making any further changes.

Upgrading VMs before diagnosing the root cause is premature and could cause additional disruption; the error is at the orchestrator level, not reported from within the guest VMs.