Which two additional resources should you create in Azure?

You create a new Azure subscription. You create a resource group named RG1.

In RG1. you create the resources shown in the following table.

You need to configure an encrypted tunnel between your on-premises network and VNET1.

Which two additional resources should you create in Azure? Each correct answer presents part of the solution.
A . a point-to-site configuration
B . a local network gateway
C . a VNet-to-VNet connection
D . a VPN gateway
E . a site-to-site connection

Answer: B,D

Explanation:

A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. This type of connection requires a VPN device, a local network gateway, located on-premises that has an externally facing public IP address assigned to it.

Finally, create a Site-to-Site VPN connection between your virtual network gateway and your on-premises VPN device.

References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal