Your security team at SkyNet Solutions is configuring a Compute Engine VM to ensure it cannot access the public internet or connect to any Google-managed APIs or services. Which two configurations must remain disabled to enforce this restriction? (Choose two.)