A security tester wants to confirm that regional row restrictions work. Which test is strongest?

1. Run representative queries as users with different entitlements, including direct authoring paths
2. Count the number of folders in the catalog
3. Ask an administrator whether the dashboard looks correct
4. Verify only that the Region prompt is hidden