A fleet must install approved patches in a maintenance window while limiting simultaneous disruption and stopping further rollout after excessive failures. Which controls are appropriate? Select 2 answers.

1. Set concurrency to the whole fleet and assume a log-retention rule limits simultaneous reboots.
2. Run only a compliance scan and declare every missing patch installed.
3. Ignore application health as long as the patch command started.
4. Configure concurrency and error thresholds and validate post-patch health.
5. Use appropriate patch baselines and a scheduled installation task against the intended targets.