Given a Scenario, Troubleshoot Issues with Certificate Management VCP-VCF-SUPPORT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   An external certificate import fails because the certificate chain is incomplete. What does this mean?

   • AThe certificate's key size is too small
   • BThe certificate's subject name is incorrect
   • CThe certificate is expired
   • DThe certificate is not signed by a trusted root
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An administrator is replacing the certificate on a vCenter Server in a VCF workload domain. The new certificate was generated from a CSR created by the VCF Certificate Manager, and the private key was stored in the VCF keystore. After the replacement completes, the vCenter service fails to start with a 'key store was tampered with, or password was incorrect' error. What is the most likely cause?

   • AThe keystore file was corrupted or the password was mistyped when the certificate was imported, causing the keystore to be unreadable.
   • BThe certificate was imported into the wrong keystore alias, so the service is reading a different, corrupted entry.
   • CThe keystore password was changed by the Certificate Manager during the replacement process, but the service was restarted with the old password.
   • DThe certificate was imported with a mismatched private key that does not correspond to the public key in the certificate.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is importing an external certificate for the vCenter Server in a VCF workload domain. The certificate was issued by a public CA and the administrator downloaded the certificate in Base-64 encoded CER format along with a separate file containing the intermediate CA certificates. The import fails with an error stating that the certificate chain is incomplete. What is the most likely cause?

   • AThe leaf certificate's private key does not match the public key in the certificate.
   • BThe intermediate CA certificates were not included in the same file as the leaf certificate, or were not imported in the correct order.
   • CThe certificate was issued for a different subject than the one configured in the VCF inventory.
   • DThe certificate was downloaded in DER format instead of Base-64, so the VCF Certificate Manager cannot parse it.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   After an automatic certificate renewal completes, some services in the VCF fleet become unavailable. What is the most likely cause?

   • AThe certificate authority is overloaded
   • BThe certificate was renewed too early
   • CThe certificate's validity period was extended
   • DThe new certificate was not propagated to all components
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An administrator notices that automatic certificate renewal in a VCF fleet is not occurring at the scheduled time. Which factor is a common cause of this issue?

   • AThe certificate authority is not reachable from the management domain
   • BThe certificate template is configured for manual approval
   • CThe certificate's private key is stored on a hardware security module
   • DThe certificate is still valid for more than 30 days
   Reveal Solution Discussion Select an answer first