You are responsible for recommending an optimal strategy for routing internet-bound traffic from the landing zones while adhering to specific requirements. The objective is to route all internet-bound traffic originating from the landing zones through Azure Firewall, which is deployed in a dedicated Azure subscription. Additionally, you must ensure the following criteria are met:

1. Provide a secure score that is scoped specifically to the landing zone.
2. Ensure that Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone using the Microsoft backbone network, avoiding public endpoints.
3. Minimize the possibility of data exfiltration.
4. Maximize network bandwidth.

What strategy should you recommend as part of the landing zone deployment to fulfill these requirements?