To comply with your organization's security gcp video

Full Certification Question

To comply with your organization's security policy, which mandates that all internet-bound traffic returns to your on-premises data center via HA VPN tunnels before accessing the internet, and that virtual machines (VMs) can utilize private Google APIs using private virtual IP addresses 199.36.153.4/30, how should you configure the routes to facilitate these traffic patterns?