A server's route and cloud security rules permit TCP 8443, but connections are refused immediately. Which check is most relevant?

1. Increase the subnet CIDR without inspecting the service.
2. Delete all DNS zones as the first action.
3. Assume more IAM administration privileges will start the process.
4. Whether a process is listening on the correct address and port, and how the guest firewall responds.