A. Modify the VCN instance subnet route table to add a route back to the customer's on-premises environment to dynamic routing gateway (DRG)

B. Modify the VCN default route table to add a route back to the customer's on-premises environment to DRG

C. Modify the instances VCN subnet associated security list and add a stateful ingress rule to allow ICMP traffic

D. Modify the instances VCN subnet associated security list and add a stateful egress rule to allow ICMP traffic