You have on-premises Windows devices.

You have an Azure subscription that contains a virtual network named VNet1.

You need to create a Site-to-Site (S2S) VPN between the on-premises network and VNet1.

Which three resources should you create? Each correct answer present part of the solution.

NOTE; Each correct selection is worth one point.