Which production baseline preserves diagnostics without exposing them in HTTP responses?

Which production baseline preserves diagnostics without exposing them in HTTP responses?

1. E_ALL, display_errors Off, log_errors On
2. error_reporting 0, display_errors Off, log_errors Off
3. E_ERROR only, display_errors On, log_errors Off
4. E_ALL, display_errors On, log_errors On