Traffic stops after a BGP peer withdraws a required prefix. The team needs the immediate routing cause before changing firewall rules. Which approach best fits?

1. Inspect BGP session state and advertised and learned routes.
2. Investigate DNS zone selection, forwarding, and cached answers.
3. Review the relevant Cloud Audit Logs administrative events.
4. Investigate MTU and path-MTU discovery behavior end to end.