A hub VNet is peered with two spoke VNets. The spokes need to exchange traffic through a firewall in the hub. What must the design include beyond the peerings?

1. Public IP addresses on every spoke VM
2. No additional routing because all peerings provide automatic transit
3. Appropriate spoke routes through the firewall and forwarding-enabled connectivity
4. Identical address ranges on all three VNets