A company runs an intranet application on premises. The company wants to configure a cloud backup of the application. The company has selected AWS Elastic Disaster Recovery for this solution. The company requires that replication traffic does not travel through the public internet. The application also must not be accessible from the internet. The company does not want this solution to consume all available network bandwidth because other applications require bandwidth. Which combination of steps will meet these requirements? (Choose three.) A. Create a VPC that has at least two private subnets, two NAT gateways, and a virtual private gateway. B. Create a VPC that has at least two public subnets, a virtual private gateway, and an internet gateway. C. Create an AWS Site-to-Site VPN connection between the on-premises network and the target AWS network. D. Create an AWS Direct Connect connection and a Direct Connect gateway between the on-premises network and the target AWS network. E. During configuration of the replication servers, select the option to use private IP addresses for data replication. F. During configuration of the launch settings for the target servers, select the option to ensure that the Recovery instance’s private IP address matches the source server's private IP address.