Your organization has created a new auto-labeling policy in Microsoft Purview to apply the 'Highly Confidential' sensitivity label to documents in SharePoint and OneDrive that contain credit card numbers. Before enabling the policy for all users, the compliance team wants to validate which files would be affected and review potential false positives without actually applying any labels. What should you do?