You need to implement network security to meet the security and performance requirements. Which two actions should you perform?

Deploying two Azure Firewall instances with Azure Firewall Manager provides high availability and centralized management for your network security. This setup ensures that if one firewall fails, the other can continue processing traffic, maintaining service continuity and performance. Azure Firewall offers advanced threat protection and granular control over network traffic. Deploying a Network Security Group (NSG) and two Application Security Groups (ASGs) allows for fine-grained control over network traffic to and from virtual machines. NSGs filter traffic at the subnet or NIC level, while ASGs enable you to group VMs by application function, simplifying rule management. This combination enhances security by segmenting your network and applying specific rules to different application tiers. Filtering traffic by using outbound, inbound, or infrastructure rules are features of Azure Firewall, but they are not deployment actions themselves. Deploying a single Azure Firewall instance does not meet high availability requirements.