A company operates workloads exclusively within a dedicated server room, accessible solely from within the internal company network. You need to establish connections to these workloads from Compute Engine instances within a Google Cloud Platform (GCP) project. Which two methods can you employ to fulfill this requirement? Choose two.