An administrator is tasked with creating a custom VMware Cloud Foundation (VCF) Operations Web Certificate. What are three requirements to which the certificate must conform to be used with VCF…

Question

Options

• AIn the certificate file, all certificates and the private key must be in PEM format.
• BIn the certificate file, the server certificate must be last in the order of certificates.
• CThe VCF Operations certificate cannot use the Subject Alternative Name (SAN) extension.
• DIn the certificate file, the server certificate must be first in the order of certificates.
• EThe certificate file must include the server certificate, a private key, and all issuing certificates.
• FIn the certificate file, all certificates and the private key must be in PFX format.

• A
  94% (44)
• C
  2% (1)
• F
  4% (2)

Explanation

For a custom VCF Operations Web Certificate to function correctly, it must use PEM format (A) - the open-text, base64-encoded standard that VCF Operations reads; the server certificate must appear first (D) in the certificate chain file, followed by any intermediate/root CA certificates; and the file must be complete, containing the server cert, private key, and all issuing (intermediate/root) certificates (E) so the full chain of trust can be validated.

Why the distractors are wrong:

• B is the opposite of D - putting the server cert last breaks the expected chain order VCF Operations requires.
• C is false - SANs are required for modern TLS; VCF Operations fully supports and expects SAN extensions (especially for hostnames/IPs).
• F is wrong - PFX (PKCS#12) is a binary format used in Windows/IIS environments; VCF Operations requires the text-based PEM format.

Memory tip: Think "PAD" - PEM format, All chain certs included, Dserver cert first. Just remember that VCF Operations wants everything in one PEM file, server certificate leading the way, with nothing left out.

No community discussion yet for this question.