Firewall Rules for Graph API File Downloads

In the Graph API documentation, when sending a download request to the Graph API, the response is as follows:

HTTP/1.1 302 Found
Location: https://b0mpua-by3301.files.1drv.com/y23vmagahszhxzlcvhasdhasghasodfi

I have two questions:

1. Want to confirm whether allowing access to *.files.1drv.com is expected and secure when using the Graph API for file downloads.
2. Are there any official recommendations or best practices for configuring firewall rules to ensure file downloads work correctly with the Graph API?

Thank you for your help!

從連結的 Microsoft Graph driveItem 內容文件開始，檢查其下載回應如何重新導向至 files.1drv.com 主機。記錄官方的防火牆指引，並確認允許該主機是否符合預期且安全；當兩個問題都有權威答案時，工作即完成。