Filters
Question type
Study Flashcards

Scenario: A Citrix Engineer wants to provide access from WorxWeb to internal corporate websites that require client certificate authentication. The engineer has configured the NetScaler with Clientless Access to "On", and Plug-in type to Windows / Mac OSX. Which two settings should the engineer configure within the WorxWeb MDX policies to ensure that users could access these sites successfully without errors? (Choose two.)


A) Set Network access to "Tunneled to internal network".
B) Set VPN to "Full VPN tunnel".
C) Set VPN to "Secure browse".
D) Set an Allowed or blocked websites policy.

E) B) and D)
F) A) and B)

Correct Answer

verifed

verified

Scenario: A Citrix Engineer is deploying a XenMobile Proof of Concept (POC) environment. The engineer imports the XenMobile Management Server onto the hypervisor and performs the initial configuration using the console. The engineer also enables FIPS mode during the initial configuration. Which URL should the engineer use to continue the configuration in the XenMobile Console if the engineer assigns an IP address of format x.x.x.y to the XenMobile Server?


A) https://x.x.x.y:443
B) https://x.x.x.y:8443
C) https://x.x.x.y:4443
D) https://x.x.x.y:9443

E) A) and D)
F) A) and C)

Correct Answer

verifed

verified

Scenario: User password caching must be disabled in an environment due to an information technology security policy. The security policy also mandates the following: - Devices should NOT be allowed to be offline for more than 3 days. - Devices should recognize updates to applications in under 24 hours in the event of critical security updates. - Users should conduct application upgrades within 3 days of a device recognizing the availability of an update. Which combination of settings should a Citrix Engineer recommend to meet the requirements of the security policy?


A) AD password for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days)
B) AD password for authentication; maximum offline period of 72 hours (3 days) ; and app update grace period of 72 hours (3 days)
C) Worx PIN for authentication; maximum offline period of 72 hours (3 days) ; and app update grace period of 24 hours
D) Worx PIN for authentication; maximum offline period of 24 hours; and app update grace period of 72 hours (3 days)
E) Worx PIN for authentication; maximum offline period of 72 hours (3 days) ; and app update grace period of 72 hours (3 days)

F) C) and D)
G) A) and E)

Correct Answer

verifed

verified

A Citrix Engineer is configuring access to an existing XenDesktop environment. Which three settings should the engineer configure in the XenApp/XenDesktop section of the XenMobile Server? (Choose three.)


A) The legacy PNAgent site path
B) The IP address of the XenDesktop Delivery Controller
C) The XenDesktop site name
D) The path to Receiver for Web site
E) The FQDN of the StoreFront Server
F) The port used to connect to StoreFront

G) E) and F)
H) A) and E)

Correct Answer

verifed

verified

A Citrix Engineer is currently in the process of a first-time installation of a XenMobile Server using the command-line interface. Which two settings are required when configuring the remote database using SQL authentication? (Choose two.)


A) Database version
B) Port number
C) Domain name
D) Database name

E) A) and C)
F) A) and B)

Correct Answer

verifed

verified

A Citrix Engineer is preparing to publish a corporate-purchased application to all managed iOS devices. How could the engineer accomplish this task?


A) By using iOS VPP
B) By using Apple Distribution Program
C) By using Apple Developer Program
D) By using Apple XCode

E) A) and C)
F) A) and B)

Correct Answer

verifed

verified

Which task should a Citrix Engineer perform before installing the StorageZone Controller?


A) Configure the NetScaler Gateway for StorageZone Controller.
B) Configure a server with IIS requirements.
C) Configure the XenMobile Server for SAML authentication.
D) Configure the FTP client to access StorageZone.

E) B) and C)
F) C) and D)

Correct Answer

verifed

verified

Which certificate is required to configure ShareFile User Provisioning?


A) xms.domain.com- server certificate
B) Apple Push Notification service (APNs) certificate
C) Third-party SSL Listener certificate
D) xms.domain.com - SAML certificate

E) B) and D)
F) B) and C)

Correct Answer

verifed

verified

Which database type is recommended for the database connection when configuring a XenMobile Server for the first time in a production deployment using the command-line interface?


A) MySQL
B) Microsoft SQL Server Express
C) PostgreSQL
D) Microsoft SQL Server

E) A) and D)
F) All of the above

Correct Answer

verifed

verified

In which way does implementing Worx PIN improve the user experience while maintaining Enterprise security?


A) It streamlines the user experience when the Active Directory password is changed.
B) It allows the user to use a unique, synchronized PIN for device and application access without modifying corporate password policy.
C) It reduces the number of times the user has to authenticate to launch managed applications.
D) It reduces the complexity of daily password entry without modifying corporate password policy.

E) B) and D)
F) A) and C)

Correct Answer

verifed

verified

Scenario: A Citrix Engineer is configuring the NetScaler appliance for SSL offloading. The XenMobile Server is named xms.domain.com. The following is a list of the certificates installed on the NetScaler: - *.domain.com - wildcard server certificate - cacerts.pem - devices certificate - xms.domain.com - server certificate for the XenMobile Server - dc-1-CA.cer - Root certificate for *.domain.com The engineer needs to configure an SSL Load Balancing virtual server for HTTPS 443 bound with __________ and the XenMobile Server service to use __________. (Choose the correct set of options to complete the sentence.)


A) *.domain.com and dc-1-CA.cer; HTTP 80
B) *.domain.com and cacerts.pem; HTTPS 443 bound with xms.domain.com
C) *.domain.com and cacerts.pem; HTTP 80
D) *.domain.com and dc-1-CA.cer; HTTPS 443 bound with xms.domain.com

E) C) and D)
F) None of the above

Correct Answer

verifed

verified

After enrollment, Android devices are NOT connecting to the XenMobile Server. What should a Citrix Engineer do to resolve this issue?


A) Configure firewall rules to allow the XenMobile Server to communicate outbound on ports 2195 and 2196.
B) Modify MDX authentication timers.
C) Configure a scheduling policy.
D) Modify the authentication policy on the NetScaler Gateway.

E) All of the above
F) B) and C)

Correct Answer

verifed

verified

Which XenMobile deployment option would pose the greatest security risk?


A) SSL Bridge at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ) .
B) SSL Bridge at the NetScaler load balancing tier with the XenMobile Server on the internal network segment.
C) SSL Offload at the NetScaler load balancing tier with the XenMobile Server in the Demilitarized Zone (DMZ) .
D) SSL Offload at the NetScaler load balancing tier with the XenMobile Server on the internal network segment.

E) B) and C)
F) All of the above

Correct Answer

verifed

verified

How could a Citrix Engineer deploy a common application set to all corporate-managed iOS and Android devices?


A) Assign users to a custom role.
B) Assign required applications to the AllUsers Delivery Group.
C) Assign a deployment rule to users.
D) Assign an App Access policy to the AllUsers Delivery Group.

E) A) and D)
F) None of the above

Correct Answer

verifed

verified

Scenario: A Citrix Engineer needs to deploy a XenMobile solution for a large organization. The organization will use XenMobile to manage Android and iOS devices. To provide resilience, NetScaler appliances will communicate with XenMobile Servers. The engineer has deployed all necessary infrastructure and opened the required firewall ports. To load balance mobile device management traffic, the engineer has configured NetScaler to use SSL_Bridge to communicate with a XenMobile Server cluster. Which persistence method should the engineer configure to facilitate consistent communication between the NetScaler and the XenMobile Servers?


A) SSLSESSION
B) CUSTOMSERVERID
C) DESTIP
D) COOKIEINSERT

E) None of the above
F) A) and B)

Correct Answer

verifed

verified

Which XenMobile Windows Phone 8.1 policy should a Citrix Engineer configure in order to deploy Worx MDX apps to a Windows Phone 8.1 device?


A) Enterprise Hub policy
B) Exchange policy
C) App Inventory policy
D) Sideloading Key policy

E) A) and D)
F) B) and C)

Correct Answer

verifed

verified

Scenario: A Citrix Engineer needs to provide access from WorxWeb to internal corporate HTTP websites through an internal proxy server. The engineer has configured Single Sign-On to web applications on the NetScaler. What are two ways that the engineer could ensure that users are able to access the websites without being prompted to authenticate more than once? (Choose two.)


A) Disable Secure browse mode in the NetScaler session policy.
B) Set WorxWeb Network access to "Tunneled to internal network".
C) Set WorxWeb VPN mode to "Secure browse".
D) Add the website to the allowed website list for WorxWeb.

E) C) and D)
F) None of the above

Correct Answer

verifed

verified

Scenario: A customer plans to use XenMobile Server as the SAML Identity Provider for ShareFile authentication. SAML authentication should be available for MDX users as well as through the desktop sync client for Windows and Mac. The customer plans to use StorageZone Connectors. What is the minimum configuration that a Citrix Engineer must perform in order to meet the needs of the customer?


A) Populate the XenMobile Server Settings > ShareFile tab
B) Create the appropriate NetScaler Gateway Session profile and policy
C) Adjust the 'login URL' settings on the ShareFile Control Plane
D) Create a AAA vServer on NetScaler

E) B) and C)
F) None of the above

Correct Answer

verifed

verified

Scenario: A Citrix Engineer wants to configure a NetScaler Gateway with two-factor authentication within a new XenMobile deployment while providing users with the benefits of single sign-on to the existing XenApp and XenDesktop resources. The engineer configured a Public Key Infrastructure (PKI) for other components in the environment already and would like to use the same PKI. Which two types of authentication policies will the engineer need to add to the NetScaler Gateway virtual server? (Choose two.)


A) LDAP
B) Certificate
C) Radius
D) TACACS

E) All of the above
F) C) and D)

Correct Answer

verifed

verified

Which two options must a Citrix Engineer enable in order to configure XenMobile auto-discovery for iOS and Android devices in a XenMobile Enterprise deployment? (Choose two.)


A) Domain suffix
B) FQDN for the enrollment load-balancing vServer
C) Public SRV record
D) XenMobile cluster node IDs

E) B) and C)
F) C) and D)

Correct Answer

verifed

verified

Showing 41 - 60 of 70

Related Exams

Exam 1

Citrix Virtual Apps and Desktops 7 Administration

187 Questions

Exam 2

Deploy and Manage Citrix ADC 13 with Citrix Gateway

42 Questions

Exam 3

Deploy and Manage Citrix ADC 13 with Traffic Management

37 Questions

Exam 4

Citrix Virtual Apps and Desktops 7 Advanced Administration

82 Questions

Exam 5

Citrix ADC Advanced Topics - Security, Management, and Optimization

40 Questions

Exam 7

Citrix Virtual Apps and Desktops 7 Assessment, Design and Advanced Configurations

49 Questions

Exam 8

Architecting a Citrix Networking Solution

36 Questions

Show Answer