Which three options are available for ESXi Certificate Replacement? (Choose three.)

A.
VMware Certificate Authority mode

B.
Custom Certificate Authority mode

C.
Thumbprint mode

D.
Hybrid Deployment

E.
VMware Certificate Endpoint Authority Mode

Explanation:

You can perform different types of certificate replacement depending on company policy and requirements for the system that you are configuring. You can perform each replacement with the vSphere Certificate Manager utility or manually by using the CLIs included with your installation.
VMCA is included in each Platform Services Controller and in each embedded deployment. VMCA provisions each node, each vCenter Server solution user, and each ESXi host with a certificate that is signed by VMCA as the certificate authority. vCenter Server solution users are groups of vCenter Server services. See vSphere
Security for a list of solution users.
You can replace the default certificates. For vCenter Server components, you can use a set of command-line tools included in your installation. You have several options.
Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%
2FGUID-4469A6D3-048A-471C-9CB4-518A15EA2AC0.html