Which three options are available for ESXi Certificate Replacement? (Choose three.)

VMware Certificate Authority (VMCA) mode is the default ESXi certificate mode in which VMCA issues and automatically manages all host certificates, simplifying lifecycle operations such as renewals and provisioning without manual intervention.

Custom Certificate Authority mode allows organizations to deploy certificates issued by a third-party or enterprise CA, fully replacing VMCA-issued certificates to satisfy policies that require all certificates to originate from a specific trusted authority.

Thumbprint mode is a legacy ESXi certificate mode retained for backward compatibility in which the host certificate is validated by its SHA thumbprint rather than through a full CA chain, and it was the default mode in pre-5.x vSphere releases.

Hybrid Deployment is not a documented or supported ESXi certificate management mode and does not exist as a valid option in any vSphere certificate configuration.

VMware Certificate Endpoint Authority Mode is not a real certificate management mode; it does not exist in vSphere documentation or product releases.