The company wants outgoing messages signed so receivers can verify the domain-associated signature and message integrity. Which approach best fits?

1. Configure an appropriate SPF record.
2. Configure DMARC after validating SPF and DKIM alignment.
3. Configure and enable DKIM for the sending domain.
4. Configure the correct current Gmail MX records and validate propagation.