A team must upgrade a critical stateful service. What is the strongest preparation?

1. Delete all backup copies before starting
2. Assume restarting the old image always reverses database schema changes
3. Verify compatibility, take suitable recoverable backups, and rehearse the recovery path
4. Change only the deployment display name and skip validation