An organization must block new noncompliant storage configurations at deployment time. Which Azure Policy effect should be considered when applicable?

1. A resource display name
2. Audit as identical deployment prevention
3. A cost tag as the enforcement effect
4. Deny