AWS Certified Solutions Architect - Professional (#550)

A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter. Which of the following options provide a viable solution to remedy this situation? (Choose 2)

Add a route to the route table with an iPsec VPN connection as the target.
Enable route propagation to the virtual pinnate gateway (VGW).
Enable route propagation to the customer gateway (CGW).
Modify the route table of all Instances using the 'route' command.
Modify the Instances VPC subnet route table by adding a route back to the customer's on-premises environment.