Which two resources should you create?

You have an Azure virtual network and an on-premises datacenter.

You need to implement a Site-to-Site VPN connection between the datacenter and the virtual network.

Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . a virtual network gateway
B . Azure Firewall
C . a local network gateway
D . Azure Web Application Firewall (WAF)
E . an on-premises data gateway
F . an Azure application gateway
G . a user-defined route

Answer: AC

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal