Which of the following aspects of a cloud environment is MOST likely to add risk to the patch management process? A. Variations in user training / familiarity with the cloud B. A cloud services contract that specifies which parties are responsible for which aspects of patching C. VMs located physically in one location but operating in a different time zone D. The prevalence of attacker activity at the time the patch is applied