A web ACL managed rule blocks a legitimate business request after deployment. What is the best response while preserving protection?

1. Raise the DNS TTL as the only remediation.
2. Disable the entire web ACL permanently without investigation.
3. Allow every request that contains a client-provided trusted header.
4. Inspect matched rule evidence, test in count mode where appropriate, and apply a narrow validated exception.