Soru

An administrator is configuring connectivity between an on-premises network and Azure resources. The environment includes the following virtual networks in the West US region:
* `VNet-Hub` ($10.50.0.0/16$) contains a virtual network gateway and a virtual machine named `VM-Hub` deployed in a subnet.
* `VNet-Spoke1` ($10.60.0.0/16$) contains a virtual machine named `VM-Spoke1` deployed in a subnet.

The on-premises network is connected to the virtual network gateway in `VNet-Hub` via a Site-to-Site VPN. Virtual network peering is established between `VNet-Hub` and `VNet-Spoke1`.

You need to ensure that `VM-Spoke1` can access the on-premises network through the gateway in `VNet-Hub`.

Which of the following configuration settings must be enabled to meet this requirement? (Select two.)