Which statement is correct about OpenShift?

Referring to the exhibit, which two statements about OpenShift namespace isolation with a Contrail network is true? (Choose two.)

Referring to the exhibit, three microservices are deployed in an OpenShift cluster, each in a separate OpenShift project. The Web pod exposes the Web front end through a service. The App pod exposes an application API through a second service. You are asked to assign Web services external IP addresses out of the 100.64.0.0/24 subnet, and the App AIP external IP addresses from the 100.64.128.0/24 subnet.
How would you accomplish this task?

Your company has integrated Contrail with its VMware installation. In this scenario, which two steps are needed to create a virtual network and launch a virtual machine? (Choose two.)

In an OpenShift deployment, you want to have Contrail's CNI plugin create tag-based firewall policies in an automated fashion. Which action should be performed in this scenario?