An investigator needs the authentication conditions and outcome for a specific user's application sign-in. Which records should be inspected?

1. Only the application's marketing page
2. The relevant sign-in logs
3. Only a weekly cost export
4. Only storage capacity metrics