A firewall rule allows source 10.8.4.0/24 to one database port. Which practice best maintains that rule?

1. Broaden it to every source for convenience
2. Keep it forever after its project ends
3. Remove logging to avoid accountability
4. Review its owner, purpose and continued necessity