To allow a Cloud Function running in a consumer VPC to call a producer's service exposed via a Private Service Connect service attachment, what must be created? Choose two.

To enable a Cloud Function (consumer) to access a service (producer) via Private Service Connect, two key components are required. First, the producer must create a service attachment in their project. This attachment exposes their backend service (e.g., an internal Load Balancer) to consumers. Second, the consumer (in this case, the Cloud Function's VPC) needs a Private Service Connect endpoint. This endpoint acts as a network interface within the consumer VPC, allowing resources like Cloud Functions to connect to the producer's service attachment privately. VPC Network Peering is not required for Private Service Connect as it provides direct, private connectivity without peering. Private Google Access is for accessing Google APIs and services, not for connecting to other VPCs via Private Service Connect.