Which network profile can be used to isolate a deployment? (Choose the best answer.)
An administrator wants to use constraint tags to deploy cloud templates to a particular storage with a capability tag assigned; however, not all projects have access to this storage.
Which two tag formats can be defined at the cloud template level in order to ensure that cloud templates are deployed on this particular storage, whenever possible, and fail if not available? (Choose two.)
An administrator configures cloud accounts for vSphere, Amazon Web Services and Google Cloud Platform. Each public cloud account has a single region configured, with a single cloud zone associated with each. Company policy states that all development workloads should be deployed to the public cloud and all production workloads should be deployed to vSphere. The administrator wants to ensure that when creating cloud templates for this project an appropriate constraint tag is specified to meet the placement policy and that App-Dev users are allowed to select whether to deploy the machine to production or development.
The tagging strategy states that development environments should be tagged with dev and production environments should be tagged prod.
Which two actions should the administrator take to ensure the objective is met? (Choose two.)
Refer to the exhibit.

An administrator is testing a newly created Windows 2016 cloud template in Cloud Assembly. While using the Test option from within the cloud template, the attached error appears.
What is a possible cause for this error message? (Choose the best answer.)
When creating a subscription in Cloud Assembly, what are the two types of runnable items available for executing code? (Choose two.)