Universal Containers acquires a company that runs an application on Google Cloud Platform (GCP). TheGCP application needs to communicate securely with a Heroku application. The Heroku application has Internal Routing enabled and is running in a Private Space. Which two recommendations should an Architect make to satisfy this use case? Choose 2 answers.

A. Ensure that the Private Space and GCP use distinct CIDR ranges

B. Disable Internal Routing on the Heroku app.

C. Ensure that the Private Space and GCP use matching CIDR ranges.

D. Establish a secure site-to-site VPN connection between the Private Spaceand GCP.