A vulnerability scan reports an exposed package on a customer-managed compute instance. Who should plan the guest-level remediation?

1. No one, because storage encryption fixes vulnerable binaries.
2. Only Oracle's physical data-center maintenance team.
3. The customer workload team under its patching and change-management process.
4. The DNS registrar automatically.