Which four capabilities are provided by a VMware Kubernetes Service (VKS) cluster?

The vSphere Kubernetes Service (VKS) in VMware Cloud Foundation (VCF) 9.0 is designed as an " enterprise-ready " Kubernetes distribution that is deeply integrated with the SDDC stack. It provides several core capabilities out-of-the-box that would otherwise require manual configuration in a generic Kubernetes installation. The four primary capabilities identified are Authentication , storage integration , pod networking , and load balancing .

First, Authentication is handled via integration with the vSphere Supervisor, which acts as an identity proxy (using Pinniped and OIDC) to allow users to log in using their vSphere or external identity provider credentials. Second, storage integration is achieved through the vSphere CSI (Container Storage Interface), which connects Kubernetes Persistent Volume Claims (PVCs) directly to vSphere datastores. Third, pod networking is provided by an integrated CNI (typically Antrea), ensuring secure and high-performance communication between containers. Finally, load balancing is managed through the vSphere distributed switch or NSX, allowing for the automatic creation of Layer 4 load balancers for Kubernetes services of type LoadBalancer. While VCF 9.0 supports add-on services for logging and monitoring (as mentioned in Option B), the core architectural pillars provided natively by the VKS cluster lifecycle manager are those that bridge the gap between container orchestration and the underlying vSphere infrastructure, ensuring that pods have the network, storage, and access control they require to run production workloads.