A new Conditional Access policy could disrupt many users. The team wants to inspect its likely impact before enforcement. Which mode should it evaluate first?

1. Deleting all sign-in logs
2. Treating the policy's display name as a simulation
3. Report-only mode with sign-in analysis
4. Immediate tenant-wide enforcement with no testing