Which two policies can you uses?

You provide an Azure API Management managed web service lo clients. The back end web service implements HTTP Strict Transport Security (HSTS).

Every request to the backend service must include a valid HTTP authorization header.

You need to configure the Azure API Management instance with an authentication policy.

Which two policies can you uses? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A . Certificate Authentication
B . Basic Authentication
C . OAuth Client Credential Grant
D . Digest Authentication

Answer: C,D