A vulnerability report lists a deprecated cryptographic protocol still enabled on an external service. What remediation most directly addresses the finding?

1. Rename the server's certificate file only
2. Increase the DNS record's TTL
3. Hide the service's web page title
4. Disable the deprecated protocol after compatibility assessment and verify negotiation