VCP-VVF Deploy Configure And Operate Vvf Practice Question
An administrator is troubleshooting a certificate chain validation error when configuring a secure LDAP (LDAPS) identity source in vCenter Single Sign-On. The LDAP server uses a private internal Certificate Authority. Where must the administrator add the private CA certificate to resolve the validation failure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vCenter Administration -> Single Sign-On -> Configuration -> Certificates -> Trusted Root Certificates.
When adding an LDAPS identity source signed by an internal CA, vCenter SSO requires the CA certificate to be present in the SSO Trusted Root Certificates store.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Active Directory Domain Controller Certificate Store.
Why it's wrong here
While the DC holds certificates, vCenter SSO must independently trust the CA certificate signing the LDAPS connection.
- ✗
SDDC Manager -> Security -> Certificate Authority.
Why it's wrong here
SDDC Manager does not manage vCenter SSO identity source trust stores.
- ✓
vCenter Administration -> Single Sign-On -> Configuration -> Certificates -> Trusted Root Certificates.
Why this is correct
LDAPS identity source connections validate against the SSO Trusted Root Certificates store.
- ✗
ESXi Host -> Configure -> Security -> Trusted Certificates.
Why it's wrong here
This manages host trust, not vCenter SSO identity source trust.
Visual reference
About these practice questions
This VCP-VVF question is part of Courseiva's 517-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official VMware exam blueprint
This VCP-VVF practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-VVF exam.