A private FastConnect circuit has an established BGP session, but an on-premises client cannot reach a private OCI server. Which TWO areas should be checked? Select TWO.

1. Advertised prefixes and the routes used in both directions.
2. Whether the server has a public IP address.
3. Network security rules and the server's operating-system firewall.
4. Whether the server name matches the BGP autonomous system number.