A Site-to-Site VPN tunnel is down. What should the operator examine before changing application code?

1. Whether a load balancer cookie can replace IPsec negotiation.
2. Whether both application servers use the same image display name.
3. The storage lifecycle policy for old backups.
4. Tunnel status, IKE/IPsec settings, peer reachability, and routing on both sides.