A site-to-site design must use an active-active Azure VPN gateway. What should the on-premises topology be prepared to establish?

1. An SMB share on each gateway instance
2. Tunnels to both active Azure gateway instances
3. Direct peering to the GatewaySubnet without a VPN tunnel
4. One tunnel to an arbitrary instance with the second permanently ignored