A source database includes confidential information that should not appear in a developer migration test environment. Which approach best fits?

1. Run a representative rehearsal against an isolated target and document measured results.
2. Rebuild least-privilege target permissions and validate workload identities.
3. Use appropriately de-identified representative test data.
4. Complete operational handover and validate target backups, alerts, and runbooks.