A change to network policy blocks legitimate production traffic. Which practice best supports safe recovery?

1. Erase the change record to avoid confusion
2. A tested rollback plan and retained known-good configuration
3. Apply unreviewed changes across every account simultaneously
4. Remove every production network restriction indefinitely