An architect has been tasked with designing a new VMware Cloud Foundation (VCF) solution. The following design decisions were documented after requirements gathering workshops with the customer:

• Deploy a VCF Fleet into each of the DC1 and DC2 datacenters.

• Deploy two VCF instances (VCF1 and VCF2) into each VCF Fleet.

• Use the existing, supported third-party solution to provide Multifactor Authentication (MFA) for users accessing the VCF components.

The architect also documented the following information from the workshops:

• The customer wants to minimize the risk of a single operational task performed by an administrator impacting multiple components.

• The customer wants to avoid single points of failure by using high availability architectures.

Which two design decisions should the architect include for the authentication approach based on the information provided? (Choose two.)