You have an Azure virtual network and an on-premises datacenter.
You are planning a Site-to-Site VPN connection between the datacenter and the virtual network.
Which two resources should you include in your plan? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. a user-defined route B. a virtual network gateway C. Azure Firewall D. Azure Web Application Firewall (WAF) E. an on-premises data gateway F. an Azure application gateway G. a local network gateway