Which statement about software management in Cisco SD-WAN is correct?

Software downgrades are unsupported for vManage. This is a critical operational constraint in Cisco SD-WAN. While upgrades are standard, attempting to downgrade vManage can lead to database inconsistencies or system instability, making it an unsupported and risky operation. For other controllers (vBond, vSmart) and vEdges, downgrades are generally supported but require careful planning and understanding of compatibility matrices. The other options are incorrect: Software upgrade operations in a group do not necessarily always include vManage, vBond, and vSmart simultaneously. Upgrades can be performed on individual components or subsets depending on the maintenance window and specific upgrade path. Software images are typically uploaded to vManage through secure protocols like HTTPS, not unencrypted HTTP or FTP. Software images are transferred to devices from vManage, but the specific VPN used for image transfer is not VPN 512 or VPN 0; these VPNs have other specific functions (VPN 0 for control plane, VPN 512 for management traffic in some contexts). Image transfer often leverages the secure OMP overlay.