Question
Your on-premises network contains a VPN device.
You have an Azure subscription that contains a virtual network and a virtual network gateway.
You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
```powershell
...
$policy = [Cmdlet 1] -IkeEncryption AES256 -IkeIntegrity SHA384 -DhGroup DHGroup24 -IpsecEncryption AES256 -IpsecIntegrity SHA256 -PfsGroup None -SALifeTimeSeconds 14400 -SADataSizeKilobytes 102400000
...
[Cmdlet 2] -Name $Connection16 -ResourceGroupName $RG1 -VirtualNetworkGateway1 $vnet1gw -LocalNetworkGateway2 $lng6 -Location $Location1 -ConnectionType IPsec -IpsecPolicies $policy -SharedKey 'AzureA1b2C3'
```
NOTE: Each correct selection is worth one point.
Explanation
Cmdlet 1 is New-AzIpsecPolicy, which builds the custom IKE and IPsec algorithms, DH and PFS groups and SA lifetimes for a Site-to-Site or VNet-to-VNet connection. New-AzIpsecTrafficSelectorPolicy defines traffic selector prefixes, New-AzServiceEndpointPolicy is for service endpoints, and New-AzVpnClientIpsecPolicy applies to Point-to-Site clients. Cmdlet 2 is New-AzVirtualNetworkGatewayConnection, which creates the IPsec connection between the virtual network gateway and the local network gateway and accepts -IpsecPolicies. The other cmdlets create a Virtual WAN hub, a gateway or a NAT rule, not a connection.
