Your organization wants to deploy attack surface reduction (ASR) rules to Windows 11 devices via Intune endpoint security policy. A line-of-business application relies on Office macros that call child processes, and you are concerned that enabling ASR rules in enforce mode could break this application. You need to identify which ASR rules would impact the application without disrupting users before enforcing the rules. What should you do?