You are developing a new application that needs to connect to a Cloud SQL instance from Compute Engine virtual machine (VM) instances located in a VPC network. These VM instances do not have external (public) IP addresses. Which two steps must you take to enable this private connectivity to Cloud SQL? (Choose two.)