An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA). Which two actions will accomplish this? (Choose two.)

Using a Service Principal Name (SPN) is a valid method to configure an IWA identity source on a VCSA that has not been domain-joined, as the SPN provides the necessary Kerberos identity mapping to Active Directory without requiring full domain membership.

Providing a Domain Administrator credential alone is not a recognized configuration method for IWA on VCSA - the identity source requires either a Machine Account (via domain join) or an SPN, not a generic administrative account.

Joining the VCSA to Active Directory and using the resulting Machine Account is the standard domain-join method for IWA - the domain join process automatically registers the VCSA as a computer object in AD, and that Machine Account is then used to authenticate the IWA identity source connection.

Manually creating a separate computer account in AD is not a distinct supported approach - when joining the VCSA to the domain (option C), the machine account is created automatically as part of that process, making a separate manual creation step redundant and not a prescribed workflow.