Which of the following best describes the primary function of a vSphere Namespace within a vSphere with Tanzu environment?

A Cloud Administrator is optimizing the Supervisor configuration. They initially deployed the Supervisor with the NSX Advanced Load Balancer (Avi). However, users are reporting certificate warning errors when accessing the Supervisor Control Plane API endpoint.
Review the current status:
Status: Running
Config Status: Certificate Untrusted
[Certificate Details]
Subject: CN=192.168.10.50
Issuer: CN=192.168.10.50
Type: Self-signed
To resolve this and ensure compliance, the administrator needs to replace the machine SSL certificate.
Which specific actions are part of the correct procedure to replace the Supervisor certificate? (Choose
2.)

A VI Administrator attempts to upgrade the Supervisor Cluster but the option to upgrade is grayed out or unavailable in the vSphere Client, even though a new version is known to be available.
Which of the following are valid reasons for this state? (Select all that apply.)

A Platform Engineer needs to provide a custom Virtual Machine Class to the Data Science team.
They require a VM with exactly 16 vCPUs and 64 GB of RAM for a specific model training workload. The default classes do not match these specifications.
Which sequence of steps allows the engineer to make this specific configuration available to the team's namespace? (Choose 2.)

A Security Architect needs to integrate an OIDC provider (Azure AD) with vSphere to provide authentication for a new fleet of TKG clusters. The requirement is to map the Azure AD group k8s- platform-admins (Group Claim: 9283-uuid-xyz) to the cluster-admin role on all TKG clusters automatically upon creation.
Which architectural approach achieves this global policy enforcement? (Choose 2.)