VCP-DCV vSphere Security Practice Question
During a security audit, it is found that the vCenter Server is using the default self-signed certificate. The administrator is tasked to replace it with a certificate from an enterprise CA. What is the first step after obtaining the CA-signed certificate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Convert the certificate and private key into PEM format and place them in the appropriate directory.
The certificate must be in a format that vCenter can use; typically, it needs to be combined with the private key. Option B is premature before preparing the certificate. Option C is incorrect because certificate import is done via certificate management tools, not vSphere Web Client. Option D is incorrect because the private key is included in the signed certificate generation process, not imported separately.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Convert the certificate and private key into PEM format and place them in the appropriate directory.
Why this is correct
vCenter expects PEM files for certificates and keys.
- ✗
Use the vSphere Web Client to upload the certificate.
Why it's wrong here
Certificate replacement is done via command-line or Certificate Manager UI, not Web Client.
- ✗
Import the private key into the Windows Certificate Store.
Why it's wrong here
vCenter does not use Windows Certificate Store for machine SSL.
- ✗
Restart the VMware Certificate Service.
Why it's wrong here
Restarting prematurely without proper setup may cause service failure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.