A. Configure the Threat intelligence settings for FW1.
B. Deploy an Azure Application Gateway to VNet1.
C. Deploy Azure Bastion to VNet1
D. Configure an inbound rule on FW1.
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/overview