Choose two. You want to enforce Kubernetes NetworkPolicy rules at the pod level in a new GKE cluster. Which two steps are required?

To enforce Kubernetes NetworkPolicy rules, you must first enable the GKE Network Policy feature during cluster creation. This activates the necessary network policy controller within the GKE cluster. Once enabled, you then define and apply Kubernetes NetworkPolicy resources within the specific namespaces where you want to control pod-to-pod or pod-to-external traffic. These policies specify how groups of pods are allowed to communicate with each other and other network endpoints. VPC firewall rules operate at the VM instance level, not the pod level, so opening VPC firewall ports or attaching network tags to pods would not directly implement pod-level NetworkPolicy enforcement.