VCP-VVF Deploy Configure And Operate Vvf Practice Question
An administrator is troubleshooting a certificate validation error between vCenter Server and an ESXi host in a vSphere Foundation 9.0 cluster. The host shows a status of 'Not Responding' and connection tests reveal that the custom CA certificate installed on vCenter is not trusted by the host's local SSL store. How can the administrator resolve this certificate trust issue without reinstalling the host?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Select the disconnected ESXi host in the inventory, navigate to Actions > Certificate > Renew Certificate to push the valid trust chain from vCenter.
When custom certificates are used, the ESXi host must trust the VMCA or custom root CA. The administrator can regenerate or push the correct thumbprint/certificate to the host via the vSphere Client (Actions > Connection > Renew Certificate).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Run the command `esxcli system settings advanced set -o /Security/TrustSelfSigned -i 1` via SSH.
Why it's wrong here
There is no such advanced setting for bypassing custom CA trust relationships on ESXi 9.0.
- ✓
Select the disconnected ESXi host in the inventory, navigate to Actions > Certificate > Renew Certificate to push the valid trust chain from vCenter.
Why this is correct
The Renew Certificate action updates the SSL certificate on the ESXi host to match the current vCenter certificate authority trust.
- ✗
Disconnect the host from vCenter, remove it from the inventory, and deploy a new OVA of the host.
Why it's wrong here
Re-deploying an ESXi host is unnecessary for resolving certificate trust mismatches.
- ✗
Log in to the ESXi Direct Console User Interface (DCUI), select Reset System Configuration, and reboot.
Why it's wrong here
Resetting system configuration clears all host settings, which is overly disruptive.
Visual reference
About these practice questions
This VCP-VVF question is part of Courseiva's 517-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official VMware exam blueprint
This VCP-VVF practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-VVF exam.