Refer to the exhibit. A company named XYZ needs to enforce security policies for end-user browsing by installing a secure web proxy appliance. The appliance must inspect all web traffic, and all remaining traffic must be inspected by an NGFW that has been upgraded with intrusion prevention system functionality. In which two ways must routing be performed? (Choose two.)