Which two Heroku Enterprise features should an Architect consider?

A client needs to securely connect a Heroku app to a database on their on-premise network .

Which two Heroku Enterprise features should an Architect consider?
A . Private Space Peering
B . SSLEndpoint
C . Heroku Private Spaces
D . Private Space VPN Connections

Answer: C,D

Explanation:

https://devcenter.heroku.com/articles/heroku-connect-database-tables#encrypted-strings