A company is setting up a 1 Gbps AWS Direct Connect link from its on-premises network to AWS. The design uses a Direct Connect gateway and a Transit Gateway so multiple VPCs and on-premises resources can communicate. The company must reach VPC resources over a transit virtual interface (transit VIF) on that Direct Connect connection. Which combination of steps will satisfy these requirements? (Choose two.)

To enable communication between on-premises resources and VPCs via a Direct Connect gateway and Transit Gateway, both sides must advertise their routes. Advertising on-premises network prefixes over the transit VIF allows AWS to learn the routes to your on-premises network. Conversely, advertising the VPC route prefixes from the Direct Connect gateway to the on-premises network over the transit VIF ensures your on-premises network knows how to reach the VPC resources. A 1 Gbps Direct Connect link is sufficient for this setup; upgrading to 10 Gbps is not a requirement for connectivity, only for higher bandwidth. MACsec encryption is a security feature for the physical link, not a routing requirement for establishing connectivity between on-premises and VPCs.