Scenario: A Citrix Engineer needs to configure passthrough for user authentication on the Workspace front. The engineer confirmed that Single Sign-on process is running on the user machine and all the other settings are in place on the machine.
Which two steps should the engineer follow to make passthrough authentication work for the users? (Choose two.)
- A . Configure Any Domain setting under Trusted domains in StoreFront.
- B . Set the TrustManagedAnonymousXmlServiceRequests to true on the Delivery Controllers.
- C . Configure Optimal Gateway Routing on the StoreFront server.
- D . Set the TrustRequestsSentToTheXmlServicePort to true on the Delivery Controllers.
C
Explanation:
Under Settings, select Configure Trusted Domains.
Citrix Gateway has more authentication options than StoreFront. Sometimes Citrix Gateway is deployed in front of StoreFront just for the additional authentication options that Citrix Gateway provides.
Reference:
https://infohub.delltechnologies.com/l/vdi-deployment-guide-citrix-xendesktop-and-xenapp-on-vxrail-and-vsan-ready-nodes-1/installing-storefront
https://www.carlstalhood.com/citrix-gateway-ica-proxy/
Which two considerations should a Citrix Engineer be aware of when building Platform Layers within a multi-hypervisor Citrix App Layering environment? (Choose two.)
- A . Platform Layers allow for publishing a Layered Image.
- B . Platform Layers are optional and are NOT required when publishing a Layered Image base.
- C . The Enterprise Layer Manager (ELM) Repository storage maintains a maximum limit of five Platform Layers that can be built and maintained on it at a given time.
- D . There needs to be one Platform Layer per targeted virtual environment considering the provisioning type and hypervisor destination.
A,D
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-app-layering/4/layer/create-platform-layer.html
Scenario: A large company recently acquired a smaller company. A Citrix Engineer needs to add more resources in the environment, so that all users can access the published resources.
The engineer has planned to add six more StoreFront servers to the existing StoreFront server group with four StoreFront servers.
The engineer found that the scalability declined after reaching the seventh StoreFront.
What should the engineer increase in the StoreFront server group to prevent issues in the scalability?
- A . The RAM for the initial StoreFront servers before adding more servers.
- B . The CPUs allocated to the initial StoreFront servers, before adding more servers.
- C . The RAM for the six new StoreFront servers.
- D . The CPUs allocated for the six new StoreFront servers.
B
Explanation:
Reference: https://docs.citrix.com/en-us/storefront/current-release/plan.html
Which two statements are true regarding Publishing Platform Layer? (Choose two.)
- A . It can be updated directly using the Citrix App Layering Management console.
- B . Its purpose is to create a template that outputs to a virtual machine (VM) or a virtual disk.
- C . It has limited use-case scenarios, such as making minor updates to an App Layer.
- D . It is used every time changes are made, and a Platform Layer is being published.
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment. The engineer has recently deployed a new Workspace Environment Management (WEM) configuration to help improve the performance of published applications and desktops.
In which two ways can the new WEM deployment benefit the user experience? (Choose two.)
- A . Improved overall logon performance for both applications and desktops.
- B . Optimized application availability through advanced traffic management.
- C . Pro-active monitoring of system resources to provide optimal performance.
- D . Enhanced network compression capabilities for both applications and desktops.
- E . Improved Single Sign-on capabilities for both applications and desktops.
Which statement is true regarding Citrix Workspace Environment Management (WEM) Agent?
- A . WEM Agent synchronizes with the WEM Infrastructure Service on port TCP 8287.
- B . WEM Agent can be installed on the Citrix Workspace Environment Management Infrastructure Services server.
- C . WEM Agent can be installed on either a Windows Desktop OS or on a Windows Server OS.
- D . Norskale Agent Host Service manages WEM Agent and it runs under Network Service.
C
Explanation:
https://docs.citrix.com/en-us/workspace-environment-management/current-release/install-and-configure/agent-host.html
What is the first step that the Enterprise Layer Manager (ELM) server takes when creating application layers?
- A . Once the engineer manually creates the packaging machine, the ELM server initiates a connection to the packaging machine
- B . Once a packaging machine is created, the next step is to finalize the targeted installation, using the application layering finalization software
- C . Once the process to create a layer is initiated from the Layering Management Console, the ELM server then uses a connector to build a packaging machine
- D . Once the packaging machine is finalized, any application installation or configuration should be performed and completed
Scenario: A Citrix user is accessing a Windows 10 VDI machine using a personal laptop. The VDI is becoming unregistered frequently, which is making it difficult for the user to access it. In order to troubleshoot the issue, a Citrix Engineer is assigned to collect CDF logs.
On which two components should the engineer run Citrix Diagnostic Facility (CDF) control to capture the required logs? (Choose two.)
- A . Windows 10 VDI
- B . Delivery Controller
- C . StoreFront server
- D . User’s personal laptop
A,B
Explanation: https://support.citrix.com/article/CTX224308
Scenario: A Citrix Engineer administering a Citrix Virtual Apps and Desktops environment is experiencing inconsistency with Virtual Delivery Agent (VDA) registration. After much investigation, the engineer determined the issue is resulting from intermittent problems with the Windows services on the VDA machine and the Delivery Controller.
Which set of Citrix services should the engineer troubleshoot to find the root cause?
- A . BrokerAgent.exe and BrokerService.exe
- B . BrokerAgent.exe and Citrix.Host.exe
- C . BrokerService.exe and Citrix.Host.exe
- D . PicaSvc2.exe and BrokerService.exe
A
Explanation:
https://support.citrix.com/article/CTX139415
Scenario: A newly created Citrix Virtual Apps and Desktops site has sensitive information. The users consistently use different browsers for their daily tasks. A Citrix Engineer is looking for ways to minimize attacks like ransomware, phishing, and session hijacking.
Which two steps can the engineer take to minimize attacks without interfering with user productivity? (Choose two.)
- A . Disable access to specific browsers.
- B . Disable all the user plugins.
- C . Implement HTTP Strict Transport Security (HSTS).
- D . Use HTTP response headers to send security policies to endpoint browsers.
B,C
Explanation:
https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_S heet.html
Which two statements are true when Citrix App Layering is used with Citrix Virtual Apps and Desktops? (Choose two.)
- A . Citrix App Layering offers all the same functionality as Citrix Provisioning (PVS).
- B . Citrix App Layering simplifies application deployments and updates.
- C . Citrix App Layering reduces management of multiple golden images.
- D . Citrix Machine Creation Services (MCS) catalogs can be updated within the Citrix App Layering Management console.
B,C
Explanation:
https://docs.citrix.com/en-us/tech-zone/design/reference-architectures/app-layering.html
Which User Layer requires the least amount of administrative effort to store user settings limited to Microsoft Outlook data and settings for a hosted shared desktop solution based on Windows Server 2012?
- A . Session Office 365
- B . Citrix Profile Management with Full
- C . Full
- D . Office 365
A
Explanation:
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/enable-user-layers.html
Scenario: A Citrix Engineer has recently implemented Citrix Gateway in a Citrix Virtual Apps and Desktops environment. The engineer has done the testing with the test user account for authentication and enumeration of the published resources.
During the authentication at Citrix Gateway, the test user is getting the error ”403 -Forbidden: Access is denied."
Which two configuration steps are causing this error? (Choose two.)
- A . The StoreFront address in the Citrix Gateway Session Profile matches the site address in StoreFront.
- B . DNS host entry is present on StoreFront to point to the Citrix Gateway virtual server.
- C . The intermediate and root certificates in Citrix Gateway console are NOT linked.
- D . The call back address is set to HTTP.
C,D
Explanation:
https://support.citrix.com/article/CTX206900
A Citrix Engineer wants to setup multi-site configurations, grouping Citrix Virtual Apps and Desktops deployments that deliver the same desktop or application so that identical resources can be aggregated for users.
What are two considerations regarding resources that the engineer needs to consider before setting up multi-site configuration? (Choose two.)
- A . They must have the same name.
- B . They should be delivered from the same site.
- C . They must have the same path on each server to be aggregated.
- D . They must be tagged.
A,C
Explanation:
Reference: https://docs.citrix.com/en-us/storefront/current-release/plan/high-availability-and-multi-site-configuration.html
After a Citrix Engineer configured FAS and SAML in a Citrix Virtual Apps and Desktops site, the Virtual Delivery Agent (VDA) machine requests the ________ from ________ in order to complete the VDA Windows logon process.
- A . Server’s Certificate; Active Directory Certification Services
- B . User’s Certificate; Federated Authentication Service
- C . Server’s Certificate; Delivery Controller
- D . User’s Certificate; Active Directory Certification Services
B
Explanation:
The VDA requests the user’s certificate from FAS so it can complete the VDA Windows logon process.
Reference: https://www.carlstalhood.com/citrix-federated-authentication-service-saml/
Scenario: A Citrix Engineer is working on a Citrix Virtual Apps and Desktops deployment.
The engineer is considering implementation of a multi-zone site instead of multiple sites.
Which three benefits of zones can help the engineer to support this decision? (Choose three.)
- A . Zones can help in managing multiple locations without multiple SQL databases.
- B . Zone implementation in a site reduces the dependency of site on site database.
- C . Zones lower the administrative overhead and implementation cost.
- D . Zones help users with fast resource access.
- E . Zones can help in controlling application location launches through zone preference.
A,C,E
Explanation:
Reference: https://docs.citrix.com/en-us/xenapp-and-xendesktop/7-15-ltsr/manage-deployment/zones.html
A Citrix Engineer is using the Citrix Profile Management Health Status feature within the Workspace Environment Management (WEM) environment.
Which file should the engineer review for results of these health checks to identify specific issues?
- A . AuthManConfig.xml
- B . UpmConfigCheckOutput.xml
- C . UserProfileManager.log
- D . #_pm_config.log
B
Explanation:
Reference: https://docs.citrix.com/en-us/workspace-environment-management/current-release/user-interface-description/administration.html
How can a Citrix Engineer setup synchronization of subscription data between server groups using a replication schedule?
- A . Execute a Windows PowerShell command on the StoreFront server
- B . Make changes in the subscription file on the StoreFront server
- C . Make changes in the web.config file on the StoreFront server
- D . Use the StoreFront console
B
Explanation:
Reference: https://www.citrix.com/blogs/2015/02/19/storefront-synchronization-vip/
Which three considerations are accurate when adding Active Directory (AD) objects to a Workspace Environment Management (WEM) Configuration set? (Choose three.)
- A . Multiple users can be added at the same time by separating names with semicolons.
- B . Individual or multiple AD users can be added to the WEM console but NOT groups.
- C . Machine objects can be added using the Add Object button or Add OU button.
- D . Objects must be configured in WEM before actions can be applied to them.
- E . Item Priority can be assigned to user or OU objects but NOT to machine objects.
A,C,D
Explanation:
https://docs.citrix.com/en-us/workspace-environment-management/current-release/user-interface-description/active-directory-objects.html
A SQL Database Administrator has been asked to create a backup policy for the Citrix Virtual Apps and Desktops databases.
Which three SQL databases does a SQL Database Administrator need to back up for a Citrix environment? (Choose three.)
- A . Monitoring database
- B . Site database
- C . Configuration Logging database
- D . License Server database
- E . Subscription database
A,B,C
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/technical-overview/databases.html
Scenario: A Citrix Engineer created four application layers with different applications at different time stamps as shown below:
App Layer A C Microsoft Office Professional C 15/08/2019, 14:28
App Layer B C Adobe Acrobat Reader and Cisco Webex C 14/07/2019, 11:45
App Layer C C Active Directory Users & Computers, Citrix Studio C 20/08/2019, 16:10
App Layer D C Google Chrome and GoToMeeting C 27/07/2019, 10:35
Which layer would hold the highest priority in this scenario?
- A . App Layer A
- B . App Layer D
- C . App Layer B
- D . App Layer C
D
Explanation:
https://docs.citrix.com/en-us/citrix-app-layering/4/layer.html
Which database high availability option does Citrix recommend for Workspace Environment Management (WEM)?
- A . Always On
- B . Mirroring
- C . Replication
- D . Clustering
A
Explanation:
https://docs.citrix.com/en-us/workspace-environment-management/current-release/system-requirements.html#sql-server-always-on
Scenario: A Citrix Engineer needs to use Citrix App Layering to create layered images for use with a Citrix Virtual Apps and Desktops environment.
The environment currently has the following (MCS) Machine Creation Services-provisioned images.
-Windows 10 Virtual Delivery Agent (VDA) machines with App A, App B, and App C installed
-Windows 10 VDA machines with App A and App B installed
Application A is a common app that is needed by all users. Application B is a time reporting app needed by all individual contributors, and Application C is a managerial app needed by executives, but restricted from use by everyone else.
The environment uses Citrix Hypervisor to host all VDA machines.
To meet the minimum requirements while reducing administrative effort, the engineer would need layered image(s), using.
- A . 1; an Elastic Layer
- B . 1; a User Layer
- C . 1; no Elastic or User Layers
- D . 2; no Elastic or User Layers
A
Explanation:
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/assign-elastic-layers.html
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps and Desktops environment with both internal and external users and has deployed Workspace Environment Management (WEM) within the infrastructure to provide resources to users within their sessions.
The engineer has recently added a network printer to WEM under the Actions node, using the New Network Printer dialog tab, and wants to limit this printer usage to internal Citrix users, as shown below:
✑ Internal users utilize Windows 10 only
✑ External users Windows 10 and Windows 2016 machines
✑ The server network IP address range is from 192.168.10.1 to 192.168.10.200
✑ Citrix LAN users are all within IP address scope of 192.168.20.50 to 192.168.20.90
✑ The external users are on a public domain
✑ The Everyone group has already been added to the Assignments node within the WEM console
The engineer needs to create a Condition based on from within the Filters node and the Matching Result field within WEM to complete this task.
- A . OS Platform type; select Windows 10 from
- B . Client IP Address Match; add the IP address range 192.168.20.50 to 192.168.20.90 to
- C . IP Address Match; add the IP address range 192.168.10.1 to 192.168.10.200 to
- D . Client OS; select Windows 10 from
Scenario: A Citrix Engineer needs to use Citrix App Layering to create layered images for use with a Citrix Virtual Apps and Desktops environment.
The environment requires the following (MCS) Machine Creation Services-provisioned images:
✑ Windows 10 Virtual Delivery Agent (VDA) machines with App A, App B, and App C installed
✑ Windows Server 2016 VDA machines with App A, App B, and App C installed
The environment is in the middle of long-term hypervisor migration and uses both Citrix Hypervisor and Microsoft Hyper-V to host VDA machines. The images must be available on both hypervisor types.
The engineer has determined that Elastic and User Layers will NOT be used in this environment.
In this scenario the engineer will needlayered image(s) andOS Layer (s) to meet the image requirements while minimizing administrative effort.
- A . 4; 4
- B . 4; 1
- C . 2; 1
- D . 2; 2
- E . 4; 2
- F . 2; 4
Which two components directly communicate with each other during the process of resource launch, when Federated Authentication Service (FAS) is used? (Choose two.)
- A . Certificate Authority and Domain Controller
- B . FAS Server and Delivery Controller
- C . FAS Server and Citrix ADC
- D . FAS Server and Virtual Delivery Agent (VDA)
A,D
Explanation:
Reference: https://www.carlstalhood.com/citrix-federated-authentication-service-saml/
Scenario: A Citrix Engineer recently took over a multi-zone environment with one Primary zone in New York and two Secondary zones in San Francisco and Orlando respectively. The New York zone has two Delivery Controllers, San Francisco has one Delivery Controller, and the Orlando zone has two Delivery Controllers. The engineer received alerts that the Orlando zone Delivery Controllers were down.
Where will the Orlando zone Virtual Delivery Agent (VDA) machines register?
- A . San Francisco Delivery Controllers
- B . New York Delivery Controllers
- C . New York and Orlando Delivery Controllers
- D . New York and San Francisco Delivery Controller
Scenario: A Citrix Engineer is administering a Citrix Virtual Apps and Desktops environment consisting of multiple zones, including a Primary zone and two Satellite zones. Both the Primary and Satellite zones contain just a single Delivery Controller. Recently, the Virtual Delivery Agent (VDA) machines in the Primary zone experienced failures with registration, resulting in many users being unable to access resources for several days.
With minimal administrative effort, the engineer should add a second Delivery Controller toto prevent this issue from occurring.
- A . the Primary zone location
- B . one of the Satellite zones
- C . the Primary zone and both Satellite zones
- D . both Satellite zones, but NOT the Primary zone
Which three layers can a Citrix Engineer include in an image template? (Choose three.)
- A . Platform
- B . OS
- C . User
- D . Application
- E . Elastic
A,B,D
Explanation:
https://docs.citrix.com/en-us/citrix-app-layering/4/publish/create-image-template.html
Scenario: A Citrix Engineer is working on a StoreFront subscription synchronization issue in an existing Citrix Virtual Apps and Desktops environment. One StoreFront server is in the New York datacenter and another in the San Francisco datacenter. The servers are NOT in the same group. The engineer has run all the required PowerShell commands on both StoreFront servers.
In which local Windows user group of each StoreFront server should the engineer add the Microsoft Active Directory domain machine accounts?
- A . CitrixSuscriptionServerUsers
- B . CitrixClusterMembers
- C . CitrixSubscriptionsStoreServiceUsers
- D . CitrixSubscnptionsSyncUsers
D
Explanation: https://support.citrix.com/article/CTX236466
Which two statements are valid for Enterprise Layer Manager (ELM) storage? (Choose two.)
- A . The appliance local storage size is fixed.
- B . When installing the appliance, it comes equipped with an additional 300GB data disk.
- C . This storage also stores Elastic Layers and their .JSON files.
- D . This storage is used to store all OS, Platform and App Layers, and versions.
B,D
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-app-layering/4/manage/storage.html
A Citrix Engineer is looking for ways to secure the Virtual Delivery Agent (VDA) in the Citrix Virtual Apps and Desktops environment.
Which three steps should the engineer follow to secure the VDA? (Choose three.)
- A . Add the certificate on Citrix Gateway
- B . Enable TLS on the Delivery Controllers
- C . Add the certificate to the VDA
- D . Enable TLS on the VDA
- E . Add the certificate on the StoreFront server
What is the first step in the migration process of an on-premises Workspace Environment Management (WEM) environment that is currently in production to a WEM Citrix Cloud service?
- A . Reinstall the WEM service agent on managed machines.
- B . Export the data within the database to a SQL file.
- C . Download the migration tool from the WEM service Downloads tab.
- D . Modify permissions on the infrastructure service.
C
Explanation:
Reference: https://docs.citrix.com/en-us/workspace-environment-management/service/migrate.html
Which three pre-requisites should a Citrix Engineer take into consideration when configuring Smart Card authentication in the Citrix Virtual Apps and Desktops environment? (Choose three.)
- A . Install the vendor’s Smart Card middleware on the virtual or physical machines running the Virtual Delivery Agent (VDA) that provide user’s desktops and applications.
- B . Enable pass-through with Smart Card authentication to ensure Smart Card readers type, middleware type and configuration, and middleware PIN caching policy permit this.
- C . Enable a two-way trust relationship with the StoreFront server and the domain.
- D . Ensure that the public-key infrastructure (PKI) is configured appropriately.
- E . Ensure that Domain Passthrough authentication for the Store is on the StoreFront server.
A,C,D
Explanation:
https://docs.citrix.com/en-us/storefront/1912-ltsr/configure-authentication-and-delegation/configure-smart-card.html
A Citrix Engineer wants to enable the "Log Off Web Portal When Session is Launched" feature within Workspace Environment Management (WEM) transformer settings.
What does the engineer need to do prior to enabling this feature?
- A . Set Workspace control to NOT automatically reconnect to the sessions when users log onto StoreFront.
- B . Set Workspace control settings to log off from session when users log off from StoreFront.
- C . Set Workspace control to automatically reconnect to the sessions when users log onto StoreFront.
- D . Set Workspace control settings to NOT log off a session when users log off from StoreFront.
D
Explanation:
""If you wish to use this setting, ensure you configure workspace control to not log off a session when the Web interface is logged off" (https://wilkyit.com/2017/06/12/citrix-workspaceenvironment-manger-wem-transformer-setting-overview/)
Scenario: A Citrix Engineer is working on ICA policies to restrict sharing of client clipboard data to user sessions. However, the engineer wants to allow some specific formats to be shared.
Which two policies should the engineer configure to allow this? (Choose two.)
- A . Client clipboard write allowed formats
- B . Restrict session clipboard write
- C . Restrict client clipboard write
- D . Session clipboard write allowed formats
A,C
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/policies/reference/ica-policy-settings.html
Scenario: A Citrix Engineer has implemented a multi-zone Citrix Virtual Apps and Desktops site.
The setup is as follows:
The Primary zone has been implemented in Sweden.
The Satellite zones have been implemented in Finland, Norway and Denmark.
The Application named ‘Sys-QA’ is hosted on Virtual Delivery Agent (VDA) machines which are available in all the Satellite zones only.
The Application home zone for Sys-CA has been configured as Finland.
A user with user ID ‘test1’ has a disconnected session for Sys-QA in Norway.
Where will the session launch, if user test1 tries to reconnect to application Sys-QA?
- A . Denmark
- B . Finland
- C . Norway
- D . Sweden
A Citrix Engineer is taking over the management of an environment in which non-persistent machines were deployed with Workspace Environment Management (WEM) Agent.
Which two statements are true for this environment? (Choose two.)
- A . The Agent would need to contact the Infrastructure Service after restart to gather cache data again
- B . The cache is lost at each restart without a persistent disk
- C . The environment is NOT supported because the usage of a persistent disk is mandatory when using WEM
- D . The WEM Agent applies real time updates only when the persistent disk is used
Which two statements are true regarding the creation of OS Layers with Citrix App Layering? (Choose two.)
- A . When there is a need to update the OS of a layered image, it is ideal to create a new OS Layer.
- B . Virtual machines built as the OS Layer should be joined to a functional Active Directory domain within the infrastructure that will be utilized.
- C . The Windows Updates feature should be left enabled within the OS Layer in case any new updates occur once the OS Layer is deployed.
- D . Any Microsoft products that are updated by the Windows Updates feature should be included in the OS Layer.
- E . For best performance, complete a clean installation of the Windows operating system when building an OS Layer.
D,E
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-app-layering/4/layer/prepare-os-for-layering.html
Scenario: A Citrix Engineer is maintaining a Citrix Virtual Apps environment. The engineer has recently noticed two single-threaded applications consistently consuming 25% of the CPU resources, causing substantial performance issues for users of these servers. The engineer has deployed Workspace Environment Management (WEM) within the infrastructure and enabled CPU Spikes Protection.
What else can the engineer enable within WEM to address this issue?
- A . Exclude Specified Processes and add the two problem applications
- B . Process Affinity and add the two problem applications
- C . CPU Clamping and set it to 10% for the two problem applications
- D . Limit Sample Time and set it to 10% for the two problem applications