Configure WebApp1 to satisfy the application's data and operational requirements. Which two actions should you perform?

To meet the application's data and operational requirements, enabling HTTPS Only ensures all communication is encrypted, protecting data in transit. Turning on Incoming client certificates provides an additional layer of security by requiring clients to present a valid certificate for authentication, which is crucial for operational requirements demanding strong client identity verification. Uploading a public certificate is necessary for HTTPS, but "Turn on HTTPS Only" is the specific configuration action. Setting the Minimum TLS Version to 1.2 is good practice but not one of the two primary actions for these requirements. Changing the pricing tier is unrelated to data or operational security requirements.