
Explanation

Box 1: WSHttpBinding
A secure and interoperable binding that is suitable for non-duplex service contracts.
Incorrect: Always select a binding that includes security. By default, all bindings except the
<basicHttpBinding> element have security enabled.
Box 2: Sign
Sign. The protected part is digitally signed. This ensures detection of any tampering with the protected
message part.
Box 3: <wsHttpBing>
References:
https://docs.microsoft.com/en-us/dotnet/framework/wcf/system-provided-bindings
https://docs.microsoft.com/en-us/dotnet/framework/wcf/understanding-protection-level