A company uses HA VPN for hybrid connectivity and requires resilience to a supported single-path failure with working dynamic route exchange. Which two activities are essential? Select 2 answers.

1. Configure the documented redundant tunnel and gateway-interface topology.
2. Validate BGP advertisements, learned prefixes, and failover behavior.
3. Change DNS TTLs instead of configuring path redundancy.
4. Assume an established IPsec tunnel proves every required route is available.
5. Use one tunnel and rely on its display name to establish redundancy.