A team wants selected users to register a stronger supported authentication method during sign-in through a controlled rollout. Which capability should it evaluate?

1. An authentication method registration campaign
2. Assigning every user a privileged directory role
3. A password expiry change as a guarantee of stronger-factor registration
4. An access review as the registration prompt engine