3V0-24.25: VMware Certified Advanced Professional - vSphere Kubernetes Service

An administrator is deploying vSphere Kubernetes Services (VKS) to run containerized workloads across several regions. Each region contains a dedicated Workload Domain with Supervisor Clusters using vSphere Distributed Switch (VDS)-based networking. The organization’s security policy requires pod-to-pod and pod-to-service communication to be fully observable and controllable at the Kubernetes layer, without adding licensing or overlay complexity.

When deploying a Supervisor, which CNI should the administrator choose as the default supported option?