A VCN route points to the correct next hop, but TCP connections still fail. Which TWO checks are required? Select TWO.

1. The guest firewall and listening application port.
2. Assuming a valid route guarantees application success.
3. Resource cost tags as the packet-forwarding policy.
4. Security lists and network security groups affecting the path.