Which three options are available for ESXi Certificate Replacement? (Choose three.)
A.
VMware Certificate Authority mode
B.
Custom Certificate Authority mode
C.
Thumbprint mode
D.
Hybrid Deployment
E.
VMware Certificate Endpoint Authority Mode
Explanation:
Explanation/Reference:
A, B and C are correct
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID-4469A6D3-048A-471C-9CB4-518A15EA2AC0.html&resultof=%22%43%65%72%74%69%66%69%63%61%74%65%22%20%22%63%65%72%74%69%66%22%20
A, B, C
https://pubs.vmware.com/vsphere-60/index.jsp#com.vmware.vsphere.security.doc/GUID-32AD28E1-53C3-48E6-96A9-FD9E4015D0B2.html?resultof=%2522%2563%2565%2572%2574%2569%2566%2569%2563%2561%2574%2565%2522%2520%2522%2563%2565%2572%2574%2569%2566%2522%2520%2522%256d%2561%256e%2561%2567%2565%256d%2565%256e%2574%2522%2520%2522%256d%2561%256e%2561%2567%2522%2520%2522%2566%256f%2572%2522%2520%2522%2565%2573%2578%2569%2522%2520%2522%2568%256f%2573%2574%2573%2522%2520%2522%2568%256f%2573%2574%2522%2520
A,B,D
In the article, C is only for temporary use when transitioning from 5.5.
Incorrect. In the article, C (Thumbprint) is a legacy holdover from 5.x and is supported. There is no “Hybrid Deployment” option listed anywhere.
Specific excerpt for answer using above links
ESXi Certificate Replacement
For ESXi hosts, you can change certificate provisioning behavior from the vSphere Web Client.
VMware Certificate Authority mode (default)
When you renew certificates from the vSphere Web Client, VMCA issues the certificates for the hosts. If you changed the VMCA root certificate to include a certificate chain, the host certificates include the full chain.
Custom Certificate Authority mode
Allows you to manually update and use certificates that are not signed or issued by VMCA.
Thumbprint mode
Can be used to retain 5.5 certificates during refresh. Use this mode only temporarily in debugging situations.
Hey,passed 2V0-621D exam today!
a little bit difficult but finally finished…
many new questions, i used braindump2go 256q dumps, almost all new questions are in their dumps!
https://www.braindump2go.com/2v0-621d.html
GREATL RECOMMEND!