Scenario: You need to deploy a Compute Engine application in a single VPC that spans two regions. The application must establish communication with an on-premises network over a VPN connection. Question: How should you configure the VPN to meet the requirements?