A Platform Engineer is designing a Supervisor architecture for a critical production environment that requires resilience against the failure of an entire Availability Zone (AZ). The environment consists of three vSphere Zones: Zone-1, Zone-2, and Zone-3.
Review the following proposed configuration for the Supervisor deployment:
# Proposed Supervisor Config
Name: Prod-Supervisor
Zones:
- Zone-1
- Zone-2
Control Plane Size: Medium
Network: vDS with NSX Advanced Load Balancer
Storage: vSAN Stretched Cluster
Why will this configuration fail to meet the requirement of tolerating a full zone failure while maintaining full control plane functionality? (Select all that apply.)

A Cloud Administrator is architecting a vSphere with Tanzu environment. They must decide on the appropriate Load Balancer topology to support a requirement for fully isolated network segments for different tenants (Namespaces), ensuring no shared routing infrastructure between tenants.
Review the following available Load Balancer integration options:
A: HAProxy with Frontend Network topology
B: NSX Advanced Load Balancer (Avi) with Default Gateway topology
C: NSX Load Balancer (integrated)
D: HAProxy with Basic topology
Which of these options satisfy the requirement for tenant network isolation? (Select all that apply.)

In the context of vSphere with Tanzu and Tanzu Kubernetes Grid (TKG), what is the primary function of a Tanzu Package Repository?

A Cloud Administrator is troubleshooting an issue where the Cluster Autoscaler is thrashing (rapidly scaling up and then immediately scaling down) a TKG cluster.
Review the following sequence of events:
1. 10:00 AM - Traffic spike, HPA scales pods up.
2. 10:01 AM - Cluster Autoscaler adds 2 nodes.
3. 10:05 AM - Traffic drops slightly, HPA scales pods down.
4. 10:06 AM - Cluster Autoscaler deletes 1 node.
5. 10:07 AM - Traffic spikes again, HPA scales pods up.
6. 10:08 AM - Cluster Autoscaler adds 1 node.
This cycle repeats, causing instability.
What is the most effective configuration change to stabilize this cluster? (Select all that apply.)

A Security Operations Analyst is enforcing a policy that all container images used in TKG clusters must be pulled from an authenticated private registry (reg.secure.com). Anonymous pulls are blocked.
A developer's deployment is failing with ImagePullBackOff. The events show 401 Unauthorized.
Which steps must be taken to enable the TKG cluster to authenticate to the private registry? (Select all that apply.)