The company needs policy and reporting for messages that fail aligned sender authentication. Which approach best fits?

1. Configure and enable DKIM for the sending domain.
2. Configure the correct current Gmail MX records and validate propagation.
3. Configure an appropriate SPF record.
4. Configure DMARC after validating SPF and DKIM alignment.