An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA). Which two actions will accomplish this? (Choose two.)

Configuring the IWA identity source with an SPN is a valid approach on a VCSA - the SPN is registered to an Active Directory service account, and that account's credentials are provided in the identity source settings to allow the VCSA to authenticate against AD without requiring a full domain join.

A Domain Administrator account is not required to configure an IWA identity source - either a machine account or a service account tied to an SPN with appropriate read permissions is sufficient.

Joining the VCSA to an Active Directory domain via the appliance management interface automatically creates a machine account in AD, and that machine account can then be selected when configuring the IWA identity source, which is the most common and straightforward method.

Manually pre-creating a computer account in Active Directory is not a recognized method for configuring IWA on a VCSA - the machine account is created automatically when the appliance is joined to the domain via the VAMI or vCenter UI.