A VI Administrator sees that a new version of the Harbor Supervisor Service (v2.5.0) is available in the vSphere Client "Services" inventory. The current installed version on the Supervisor Cluster Sup-Cluster-
01 is v2.4.0.
What is the correct procedure to upgrade the running Harbor service instance to the new version?
(Choose 2.)

A VI Administrator is troubleshooting a provisioning issue where a DevOps engineer cannot deploy a Tanzu Kubernetes Grid (TKG) cluster. The engineer reports that the deployment is stuck in a Pending state.
The administrator reviews the vSphere Namespace dev-team-a configuration and current usage:
Namespace: dev-team-a
Capacity and Usage:
CPU:
Limit: 10000 MHz
Used: 9500 MHz
Memory:
Limit: 32 GB
Used: 30 GB
Storage:
gold-policy:
Limit: 500 GB
Used: 100 GB
The TKG cluster specification requires 3 control plane nodes and 3 worker nodes. Each node is configured to request 2 vCPUs (approx 4000 MHz total per node) and 4 GB RAM.
Based on this data, what is the cause of the failure? (Choose 2.)

A Cloud Administrator is analyzing a recurring issue where TKG cluster creations fail intermittently with "IP Address Exhaustion" errors, despite the IP pools appearing to have capacity. The administrator suspects that finalizers on deleted Service objects are preventing IP addresses from being released back to the pool managed by the NSX Load Balancer.
Which specific kubectl command and output field would allow the administrator to confirm that a LoadBalancer Service in the dev-ns namespace is "stuck" in deletion and holding an IP? (Select all that apply.)

A Security Architect is designing a Disconnected (Air-Gapped) vSphere with Tanzu environment for a defense contractor. The environment has NO internet access.
Requirements:
1. Developers must be able to provision TKG clusters.
2. Developers must be able to install standard packages (Contour, Prometheus).
3. All images must be scanned and hosted internally.
Which architectural components and configuration steps are strictly required to support this design?
(Select all that apply.)

A Security Architect is designing a vSphere with Tanzu environment using NSX Networking. The requirement is to implement NSX VPCs (Virtual Private Clouds) to provide hard multi-tenancy and self- service networking for development teams.
Context:
The "Finance" team needs a dedicated network space where they can create their own subnets, ACLs, and load balancers without impacting the "HR" team.
Which configuration steps are required to enable this NSX VPC capability for the Finance team? (Select all that apply.)