An engineer removes an ingress rule but observes that access remains possible. What should be investigated?

1. Delete the application's backups before retesting.
2. Change only the compartment's display name.
3. Assume the removed rule has become a permanent implicit deny.
4. Other applicable NSG or security-list allow rules and existing connection-state behavior.